openrouter-transcribe

Pass

Audited by Gen Agent Trust Hub on Mar 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/transcribe.sh executes several system commands including ffmpeg, base64, jq, and curl to process audio files and interact with the OpenRouter API.
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to https://openrouter.ai/api/v1/chat/completions to send audio data for transcription. This is the primary intended function of the skill and targets a well-known service domain.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: While the script handles sensitive information (the OPENROUTER_API_KEY environment variable), it follows safe practices by using it only for authorized header-based authentication with the intended API endpoint. It does not attempt to access unrelated sensitive local files like SSH keys or AWS credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 23, 2026, 05:36 PM