frouter
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the 'frouter-cli' package from the NPM registry as its primary functional component.
- Evidence:
npm i -g frouter-cliinSKILL.mdandscripts/setup-frouter.sh. - [COMMAND_EXECUTION]: Executes bash commands to perform environment setup, dependency installation, and configuration file management.
- Evidence:
scripts/setup-frouter.shusesnpmorbunfor installation andcatto write the JSON configuration to~/.frouter.json. - [CREDENTIALS_UNSAFE]: While the skill handles sensitive API keys (NVIDIA NIM and OpenRouter), it implements security best practices by prompting the user for input and ensuring the resulting configuration file is protected with restricted read/write permissions.
- Evidence:
scripts/setup-frouter.shapplieschmod 600to the$HOME/.frouter.jsonfile immediately after writing the keys.
Audit Metadata