ClawHub
Back to skill

Security audit

Openrouter Free Responder

Security checks across malware telemetry and agentic risk

Overview

This skill does what it says: it uses an OpenRouter API key to send prompts to OpenRouter free models and returns the response.

Use this only with prompts you are comfortable sending to OpenRouter. Keep OPENROUTER_API_KEY private, avoid including unrelated secrets in prompts or system instructions, and rotate the key if you stop using the skill.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)

Lp3

Medium
Category
MCP Least Privilege
Confidence
88% confidence
Finding
The skill explicitly requires an API key from the environment and instructs execution of a bundled Python script that makes outbound requests to OpenRouter, but it does not declare any permissions despite using env and network capabilities. This creates a security and governance gap: callers may not realize the skill can access secrets and send user/system prompt content to an external service, increasing the risk of unintended secret exposure or data exfiltration.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal