openrouter-video-generate
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill transmits user-provided prompts and image data to the OpenRouter API (openrouter.ai) to generate videos. This is the intended primary function of the skill and targets a well-known service.
- [CREDENTIALS_UNSAFE]: The bundled script manages authentication by looking for the OPENROUTER_API_KEY in environment variables or local .env files. The implementation includes logic to prevent credentials from being printed to the console or stored in shell history.
- [EXTERNAL_DOWNLOADS]: The skill downloads generated video files from remote URLs provided by the API. The script features a custom
SafeRedirectHandlerthat explicitly removes the Authorization header if a download request is redirected to a different origin, preventing credential leakage to third-party Content Delivery Networks (CDNs).
Audit Metadata