openrouter-video-generator

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed as a deterministic adapter for the OpenRouter video generation service. It manages the full lifecycle of a video generation job, including submission, polling, and downloading the final asset.- [COMMAND_EXECUTION]: The skill executes a local Python entrypoint script (scripts/openrouter_video.py). The script uses only Python standard libraries and does not perform any unauthorized system commands.- [EXTERNAL_DOWNLOADS]: The skill downloads generated media files from the API provider. The script implements a security check to ensure that the Authorization bearer token is only included in requests to the same origin as the configured base_url, preventing accidental credential exposure to third-party domains.- [DATA_EXFILTRATION]: The skill sends text prompts to the OpenRouter API to generate video content. This is the primary function of the skill and uses standard API interaction patterns.- [SAFE]: The script includes logic to sanitize filenames (_safe_filename), ensuring that generated assets are stored safely within the designated output directory without risk of directory traversal or path injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 08:36 PM
Security Audit — agent-trust-hub — openrouter-video-generator