openrouter-load-balancing

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by design, as it handles external prompt data intended for LLM processing.
  • Ingestion points: The messages and prompts arguments in the balanced_completion and parallel_completions functions within SKILL.md directly ingest untrusted input.
  • Boundary markers: The provided code examples do not implement delimiters or explicit instructions for the agent to ignore embedded commands within the processed data.
  • Capability inventory: The skill utilizes the requests library and OpenAI SDK to perform network operations to openrouter.ai.
  • Sanitization: Input data is passed to the API without prior sanitization or validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:46 AM
Security Audit — agent-trust-hub — openrouter-load-balancing