Skip to main content

openrouter-integration

Integrates applications with 300+ AI models via OpenRouter's API for model discovery, image generation, and cost tracking.

Install this skill

or
29/100

Security score

The openrouter-integration skill was audited on Mar 5, 2026 and we found 35 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 43

Template literal with variable interpolation in command context

SourceSKILL.md
43Authorization: `Bearer ${process.env.OPENROUTER_API_KEY}`,
medium line 60

Template literal with variable interpolation in command context

SourceSKILL.md
60```bash
medium line 81

Template literal with variable interpolation in command context

SourceSKILL.md
81Authorization: `Bearer ${process.env.OPENROUTER_API_KEY}`,
medium line 114

Template literal with variable interpolation in command context

SourceSKILL.md
114Authorization: `Bearer ${process.env.OPENROUTER_API_KEY}`,
medium line 142

Template literal with variable interpolation in command context

SourceSKILL.md
142Authorization: `Bearer ${process.env.OPENROUTER_API_KEY}`,
medium line 17

Curl to non-GitHub URL

SourceSKILL.md
17curl -s https://openrouter.ai/api/v1/models \
medium line 25

Curl to non-GitHub URL

SourceSKILL.md
25curl -s https://openrouter.ai/api/v1/providers \
medium line 33

Curl to non-GitHub URL

SourceSKILL.md
33curl -s "https://openrouter.ai/api/v1/generation?id=$GENERATION_ID" \
medium line 61

Curl to non-GitHub URL

SourceSKILL.md
61curl -s https://openrouter.ai/api/v1/chat/completions \
low line 41

Fetch to external URL

SourceSKILL.md
41const res = await fetch("https://openrouter.ai/api/v1/models", {
low line 78

Fetch to external URL

SourceSKILL.md
78const res = await fetch("https://openrouter.ai/api/v1/chat/completions", {
low line 111

Fetch to external URL

SourceSKILL.md
111const res = await fetch("https://openrouter.ai/api/v1/chat/completions", {
low line 139

Fetch to external URL

SourceSKILL.md
139const res = await fetch("https://openrouter.ai/api/v1/chat/completions", {
low line 43

Access to .env file

SourceSKILL.md
43Authorization: `Bearer ${process.env.OPENROUTER_API_KEY}`,
low line 81

Access to .env file

SourceSKILL.md
81Authorization: `Bearer ${process.env.OPENROUTER_API_KEY}`,
low line 83

Access to .env file

SourceSKILL.md
83"HTTP-Referer": process.env.OPENROUTER_SITE_URL || "http://localhost:3000",
low line 84

Access to .env file

SourceSKILL.md
84"X-OpenRouter-Title": process.env.OPENROUTER_APP_NAME || "My App",
low line 114

Access to .env file

SourceSKILL.md
114Authorization: `Bearer ${process.env.OPENROUTER_API_KEY}`,
low line 116

Access to .env file

SourceSKILL.md
116"HTTP-Referer": process.env.OPENROUTER_SITE_URL || "http://localhost:3000",
low line 117

Access to .env file

SourceSKILL.md
117"X-OpenRouter-Title": process.env.OPENROUTER_APP_NAME || "My App",
low line 142

Access to .env file

SourceSKILL.md
142Authorization: `Bearer ${process.env.OPENROUTER_API_KEY}`,
low line 144

Access to .env file

SourceSKILL.md
144"HTTP-Referer": process.env.OPENROUTER_SITE_URL || "http://localhost:3000",
low line 145

Access to .env file

SourceSKILL.md
145"X-OpenRouter-Title": process.env.OPENROUTER_APP_NAME || "My App",
low line 17

External URL reference

SourceSKILL.md
17curl -s https://openrouter.ai/api/v1/models \
low line 25

External URL reference

SourceSKILL.md
25curl -s https://openrouter.ai/api/v1/providers \
low line 33

External URL reference

SourceSKILL.md
33curl -s "https://openrouter.ai/api/v1/generation?id=$GENERATION_ID" \
low line 41

External URL reference

SourceSKILL.md
41const res = await fetch("https://openrouter.ai/api/v1/models", {
low line 61

External URL reference

SourceSKILL.md
61curl -s https://openrouter.ai/api/v1/chat/completions \
low line 64

External URL reference

SourceSKILL.md
64-H "HTTP-Referer: ${OPENROUTER_SITE_URL:-http://localhost:3000}" \
low line 78

External URL reference

SourceSKILL.md
78const res = await fetch("https://openrouter.ai/api/v1/chat/completions", {
low line 83

External URL reference

SourceSKILL.md
83"HTTP-Referer": process.env.OPENROUTER_SITE_URL || "http://localhost:3000",
low line 111

External URL reference

SourceSKILL.md
111const res = await fetch("https://openrouter.ai/api/v1/chat/completions", {
low line 116

External URL reference

SourceSKILL.md
116"HTTP-Referer": process.env.OPENROUTER_SITE_URL || "http://localhost:3000",
low line 139

External URL reference

SourceSKILL.md
139const res = await fetch("https://openrouter.ai/api/v1/chat/completions", {
low line 144

External URL reference

SourceSKILL.md
144"HTTP-Referer": process.env.OPENROUTER_SITE_URL || "http://localhost:3000",
Scanned on Mar 5, 2026
View Security Dashboard