Security audit
Security checks for vulnerabilities and agentic risk
This skill fetches public OpenRouter model catalog data and stores it in a local SQLite database as documented.
Before installing, understand that running scan contacts OpenRouter and creates or updates a local SQLite catalog. Use --db if you want the database somewhere specific. I found no evidence of hidden execution, credential access, destructive actions, or unrelated persistence.
The skill documentation describes a scan command that fetches catalog data from external sources, which implies network access, but the skill declares no permissions or allowed-tools scope. Missing an explicit tool/network declaration weakens least-privilege controls and can allow the skill to run with broader capabilities than reviewers or execution frameworks expect.
The scan path fetches data from a remote API and later persists the returned model metadata into a local SQLite database, but the code provides no confirmation prompt and no explicit user-facing warning about the outbound network request or local data storage before execution. Although the CLI help hints at syncing a local database, there is no direct disclosure at the point of the safety-relevant operations themselves.
No suspicious patterns detected.
