openrouter-transcribe
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/transcribe.shexecutes several system commands includingffmpeg,base64,jq, andcurlto process audio files and interact with the OpenRouter API. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to
https://openrouter.ai/api/v1/chat/completionsto send audio data for transcription. This is the primary intended function of the skill and targets a well-known service domain. - [DATA_EXPOSURE_AND_EXFILTRATION]: While the script handles sensitive information (the
OPENROUTER_API_KEYenvironment variable), it follows safe practices by using it only for authorized header-based authentication with the intended API endpoint. It does not attempt to access unrelated sensitive local files like SSH keys or AWS credentials.
Audit Metadata