Is @openrouter/ai-sdk-provider safe?

@openrouter/ai-sdk-provider is an AI npm_package analyzed by SkillTotal's deterministic static scanner. The scan found no malicious indicators, though 1 risky construct are reported for review. It can: network egress — capabilities are what the code can do, not a verdict on intent. Risk score 0/100 (low).

Automated static-analysis result. It can contain false positives and false negatives, and is not a claim about the intent of @openrouter/ai-sdk-provider's authors. Report a false positive.

return ((input, init) => fetch(

const response = await fetch(currentUrl, perHopInit("manual"));

return await fetch(currentUrl, perHopInit("follow"));

const response = await fetch(url, {

return ((input, init) => fetch(

const response = await fetch(currentUrl, perHopInit("manual"));

return await fetch(currentUrl, perHopInit("follow"));

const response = await fetch(url, {

How we determine this: deterministic static analysis (regex + AST), evidence-anchored, no code execution. Methodology →