OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Aug 7, 2026
Independent checks from skills.sh's audit partners.
The skill provides documentation for the OpenRouter TypeScript SDK. It includes a tool implementation example that uses the dangerous `eval()` function, which can lead to arbitrary code execution if the agent implements the tool as described. Additionally, the SDK's `nextTurnParams` feature creates a surface for indirect prompt injection by allowing external tool results to modify system-level instructions.
Detected behaviors
No alerts
No issues