Historial de auditorías
generate-image - 4 auditorías
Versión de auditoría 4
Más reciente SeguroJan 17, 2026, 07:28 AM
All 153 static findings are FALSE POSITIVES. The skill is a legitimate image generation tool using OpenRouter API. The static scanner flagged standard API key handling, base64 image encoding, and documentation code blocks as suspicious patterns. No malicious intent or exfiltration behavior was found. The code performs exactly as documented - generating images via API calls to https://openrouter.ai/api/v1/chat/completions.
Factores de riesgo
🌐 Acceso a red (1)
📁 Acceso al sistema de archivos (1)
🔑 Variables de entorno (1)
⚙️ Comandos externos (1)
Versión de auditoría 3
SeguroJan 17, 2026, 07:28 AM
All 153 static findings are FALSE POSITIVES. The skill is a legitimate image generation tool using OpenRouter API. The static scanner flagged standard API key handling, base64 image encoding, and documentation code blocks as suspicious patterns. No malicious intent or exfiltration behavior was found. The code performs exactly as documented - generating images via API calls to https://openrouter.ai/api/v1/chat/completions.
Factores de riesgo
🌐 Acceso a red (1)
📁 Acceso al sistema de archivos (1)
🔑 Variables de entorno (1)
⚙️ Comandos externos (1)
Versión de auditoría 2
SeguroJan 12, 2026, 04:57 PM
All 99 static findings are FALSE POSITIVES. The skill is a legitimate image generation tool using OpenRouter API. The static scanner flagged standard API key handling, base64 image encoding, and documentation code blocks as suspicious patterns. No malicious intent or exfiltration behavior was found. The code performs exactly as documented - generating images via API calls.
Factores de riesgo
🌐 Acceso a red (1)
📁 Acceso al sistema de archivos (1)
🔑 Variables de entorno (1)
⚙️ Comandos externos (1)
Versión de auditoría 1
SeguroJan 4, 2026, 04:28 PM
This is a legitimate image generation script. It reads a local .env file for the OpenRouter API key and sends prompts and optional images to the documented OpenRouter endpoint. No credential harvesting, persistence mechanisms, or execution of external code was found. The code behavior matches its stated purpose.