openrouter-config-validator
Fail
Audited by Snyk on Feb 17, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill explicitly instructs passing API keys as command-line arguments (e.g., bash scripts/validate-api-key.sh ) and requires a live OpenRouter API key for testing, which forces secrets to be included verbatim in commands/output.
Audit Metadata