openrouter-free

SUSPICIOUS. The stated purpose and API data flows are broadly coherent for an OpenRouter integration, but trust breaks at installation/execution: the skill appears to depend on an unverifiable CLI from a personal GitHub repo, then passes the OpenRouter API key into that tool. There is no direct evidence of malware or off-purpose exfiltration, but the binary/CLI provenance and credential forwarding make this a high security risk.