openrouter-load-balancing
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by design, as it handles external prompt data intended for LLM processing.
- Ingestion points: The
messagesandpromptsarguments in thebalanced_completionandparallel_completionsfunctions withinSKILL.mddirectly ingest untrusted input. - Boundary markers: The provided code examples do not implement delimiters or explicit instructions for the agent to ignore embedded commands within the processed data.
- Capability inventory: The skill utilizes the
requestslibrary andOpenAISDK to perform network operations toopenrouter.ai. - Sanitization: Input data is passed to the API without prior sanitization or validation.
Audit Metadata