OpenRouter Audio

• Outcome: Review
• Latest audit: Sep 11, 2026 · 6:42 AM UTC
• Version: 1.0.2

Overview

This skill is a coherent OpenRouter audio helper that sends user audio or text to OpenRouter and writes generated audio files locally.

Install only if you are comfortable sending the audio files or text you provide to OpenRouter using your OPENROUTER_API_KEY. Review OpenRouter's data handling terms for sensitive recordings, and delete generated temporary audio files when no longer needed.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Memory Poisoning: Persistent Context Injection, Context Window Stuffing, Memory Manipulation
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands

Findings (63)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 92% confidence

Finding

The declared purpose centers on a network-backed application feature: transcription and TTS via OpenRouter. However, the supplied code chunk is focused on low-level local audio encoding support using a WebAssembly encoder library. It validates encoder settings, loads WASM, allocates buffers, encodes PCM data, and finalizes output for formats like MP3/OGG. Those behaviors may be supportive of audio generation pipelines, but the core declared behaviors—calling OpenRouter, transcribing audio, generating speech from text, using an API key from environment, and writing output files—are not evidenced in this chunk. Because the actual visible behavior is materially different and includes an undeclared local encoding capability while omitting the primary declared capabilities, this is a mismatch based on the provided code snippet.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 98% confidence

Finding

Based on the provided code chunk, the implementation does not substantiate the declared functionality. The snippet is too minimal and incomplete to perform the described audio transcription or speech generation tasks, and none of the claimed behaviors are visible. Therefore, the description does not accurately represent what this supplied code chunk actually does.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 87% confidence

Finding

The skill advertises use of an environment variable and a remote API, which implies access to secrets and network egress, but it does not declare an explicit tool scope such as permissions or allowed-tools. That weakens policy enforcement and reviewability, making it easier for a skill to access sensitive capabilities without clear operator awareness.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The skill states it uses the OpenRouter API for transcription and speech generation but does not explicitly warn that user-provided audio and text will be transmitted to a third-party service. This can lead to unintended disclosure of sensitive spoken content, transcripts, or prompts, especially in environments where users may assume processing is local.

Content

No source excerpt is available for this finding.

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

AAAD+UIgkgBCoCACIKIAYqAgAiC5IiDCABKgIIIg2UIAcgCJMiByABKgIMIgiUkiIOkjgCCCAAQXBqIgQgCSAOkzgCACADIAogC5NDAAAAP5QiCSAMIAiUIAcgDZSTIgeSOAIMIABBdGogByAJkzgCACACQRBqIQIgAUEQaiEBIANBEGoiAyAEIgBJDQALC4QEAgJ/BH0gASACQQJ0aiEEIAEgAkEBdEF8cWpBYGohAiADQQJ0IQUDQCACKgIcIQYgBEF4aiIDIAMqAgAiByACKgIYIgiSOAIAIARBfGoiAyADKgIAIgkgAioCHJI4AgAgAiAJIAaTIgYgACoCBJQgByAIkyIHIAAqAgCUkjgCGCACIAYgACoCAJQgByAAKgIElJM4AhwgAioCFCEGIARBcGoiAyADKgIAIgcgAioCECIIkjgCACAEQXRqIgMgAyoCACIJIAIqAhSSOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCECACIAYgACoCAJQgByAAKgIElJM4AhQgAioCDCEGIARBaGoiAyADKgIAIgcgAioCCCIIkjgCACAEQWxqIgMgAyoCACIJIAIqAgySOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCCCACIAYgACoCAJQgByAAKgIElJM4AgwgAioCBCEGIARBYGoiAyADKgIAIgcgAioCACIIkjgCACAEQWRqIgQgBCoCACIJIAIqAgSSOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCACACIAYgACoCAJQgByAAKgIElJM4AgQgACAFaiEAIAMhBCACQWBqIgIgAU8NAAsLtwUBBH0gACAAKgJ8IgEgACoCPCICkjgCfCAAIAAqAngiAyAAKgI4IgSSOAJ4IAAgASACkzgCPCAAIAMgBJM4AjggACAAKgJwIgEgACoCMCICkjgCcCAAIAAqAnQiAyAAKgI0IgSSOAJ0IAAgASACkyIBQ16DbD+UIAMgBJMiAkMV78M+lJM4AjAgACABQxXvwz6UIAJDXoNsP5SSOAI0IAAgACoCaCIBIAAqAigiApI4AmggACAAKgJsIgMgACoCLCIEkjgCbCAAIAEgApMiASADIASTIgKSQ/MENT+UOAIsIAAgASACk0PzBDU/lDgCKCAAKgIgIQEgACoCYCECIAAgACoCZCIDIAAqAiQiBJI4AmQgACACIAGSOAJgIAAgAiABkyIBQ16DbD+UIAMgBJMiAkMV78M+lJI4AiQgACABQxXvwz6UIAJDXoNsP5STOAIgIAAqAhghASAAKgJYIQIgACAAKgIcIgMgACoCXCIEkjgCXCAAIAIgAZI4AlggACACIAGTOAIcIAAgAyAEkzgCGCAAKgJQIQEgACoCECECIAAgACoCFCIDIAAqAlQiBJI4AlQgACACIAGSOAJQIAAgAyAEkyIDQxXvwz6UIAIgAZMiAUNeg2w/lJM4AhQgACABQxXvwz6UIANDXoNsP5SSOAIQIAAqAkghASAAKgIIIQIgACAAKgIMIgMgACoCTCIEkjgCTCAAIAIgAZI4AkggACADIASTIgMgAiABkyIBk0PzBDU/lDgCDCAAIAEgA5JD8wQ1P5Q4AgggACoCQCEBIAAqAgAhAiAAIAAqAgQiAyAAKgJEIgSSOAJEIAAgAiABkjgCQCAAIAMgBJMiA0Neg2w/lCACIAGTIgFDFe/DPpSTOAIEIAAgAUNeg2w/lCADQxXvwz6UkjgCACAAEEMgAEFAaxBDC+4DAgJ/BH0gASACQQJ0aiEEIAEgAkEBdEF8cWpBYGohAgNAIAIqAhwhBSAEQXhqIgMgAyoCACIHIAIqAhgiCJI4AgAgBEF8aiIDIAMqAgAiBiACKgIckjgCACACIAYgBZMiBSAAKgIElCAHIAiTIgYgACoCAJSSOAIYIAIgBSAAKgIAlCAGIAAqAgSUkz
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

AAAD+UIgkgBCoCACIKIAYqAgAiC5IiDCABKgIIIg2UIAcgCJMiByABKgIMIgiUkiIOkjgCCCAAQXBqIgQgCSAOkzgCACADIAogC5NDAAAAP5QiCSAMIAiUIAcgDZSTIgeSOAIMIABBdGogByAJkzgCACACQRBqIQIgAUEQaiEBIANBEGoiAyAEIgBJDQALC4QEAgJ/BH0gASACQQJ0aiEEIAEgAkEBdEF8cWpBYGohAiADQQJ0IQUDQCACKgIcIQYgBEF4aiIDIAMqAgAiByACKgIYIgiSOAIAIARBfGoiAyADKgIAIgkgAioCHJI4AgAgAiAJIAaTIgYgACoCBJQgByAIkyIHIAAqAgCUkjgCGCACIAYgACoCAJQgByAAKgIElJM4AhwgAioCFCEGIARBcGoiAyADKgIAIgcgAioCECIIkjgCACAEQXRqIgMgAyoCACIJIAIqAhSSOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCECACIAYgACoCAJQgByAAKgIElJM4AhQgAioCDCEGIARBaGoiAyADKgIAIgcgAioCCCIIkjgCACAEQWxqIgMgAyoCACIJIAIqAgySOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCCCACIAYgACoCAJQgByAAKgIElJM4AgwgAioCBCEGIARBYGoiAyADKgIAIgcgAioCACIIkjgCACAEQWRqIgQgBCoCACIJIAIqAgSSOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCACACIAYgACoCAJQgByAAKgIElJM4AgQgACAFaiEAIAMhBCACQWBqIgIgAU8NAAsLtwUBBH0gACAAKgJ8IgEgACoCPCICkjgCfCAAIAAqAngiAyAAKgI4IgSSOAJ4IAAgASACkzgCPCAAIAMgBJM4AjggACAAKgJwIgEgACoCMCICkjgCcCAAIAAqAnQiAyAAKgI0IgSSOAJ0IAAgASACkyIBQ16DbD+UIAMgBJMiAkMV78M+lJM4AjAgACABQxXvwz6UIAJDXoNsP5SSOAI0IAAgACoCaCIBIAAqAigiApI4AmggACAAKgJsIgMgACoCLCIEkjgCbCAAIAEgApMiASADIASTIgKSQ/MENT+UOAIsIAAgASACk0PzBDU/lDgCKCAAKgIgIQEgACoCYCECIAAgACoCZCIDIAAqAiQiBJI4AmQgACACIAGSOAJgIAAgAiABkyIBQ16DbD+UIAMgBJMiAkMV78M+lJI4AiQgACABQxXvwz6UIAJDXoNsP5STOAIgIAAqAhghASAAKgJYIQIgACAAKgIcIgMgACoCXCIEkjgCXCAAIAIgAZI4AlggACACIAGTOAIcIAAgAyAEkzgCGCAAKgJQIQEgACoCECECIAAgACoCFCIDIAAqAlQiBJI4AlQgACACIAGSOAJQIAAgAyAEkyIDQxXvwz6UIAIgAZMiAUNeg2w/lJM4AhQgACABQxXvwz6UIANDXoNsP5SSOAIQIAAqAkghASAAKgIIIQIgACAAKgIMIgMgACoCTCIEkjgCTCAAIAIgAZI4AkggACADIASTIgMgAiABkyIBk0PzBDU/lDgCDCAAIAEgA5JD8wQ1P5Q4AgggACoCQCEBIAAqAgAhAiAAIAAqAgQiAyAAKgJEIgSSOAJEIAAgAiABkjgCQCAAIAMgBJMiA0Neg2w/lCACIAGTIgFDFe/DPpSTOAIEIAAgAUNeg2w/lCADQxXvwz6UkjgCACAAEEMgAEFAaxBDC+4DAgJ/BH0gASACQQJ0aiEEIAEgAkEBdEF8cWpBYGohAgNAIAIqAhwhBSAEQXhqIgMgAyoCACIHIAIqAhgiCJI4AgAgBEF8aiIDIAMqAgAiBiACKgIckjgCACACIAYgBZMiBSAAKgIElCAHIAiTIgYgACoCAJSSOAIYIAIgBSAAKgIAlCAGIAAqAgSUkz
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

AAAD+UIgkgBCoCACIKIAYqAgAiC5IiDCABKgIIIg2UIAcgCJMiByABKgIMIgiUkiIOkjgCCCAAQXBqIgQgCSAOkzgCACADIAogC5NDAAAAP5QiCSAMIAiUIAcgDZSTIgeSOAIMIABBdGogByAJkzgCACACQRBqIQIgAUEQaiEBIANBEGoiAyAEIgBJDQALC4QEAgJ/BH0gASACQQJ0aiEEIAEgAkEBdEF8cWpBYGohAiADQQJ0IQUDQCACKgIcIQYgBEF4aiIDIAMqAgAiByACKgIYIgiSOAIAIARBfGoiAyADKgIAIgkgAioCHJI4AgAgAiAJIAaTIgYgACoCBJQgByAIkyIHIAAqAgCUkjgCGCACIAYgACoCAJQgByAAKgIElJM4AhwgAioCFCEGIARBcGoiAyADKgIAIgcgAioCECIIkjgCACAEQXRqIgMgAyoCACIJIAIqAhSSOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCECACIAYgACoCAJQgByAAKgIElJM4AhQgAioCDCEGIARBaGoiAyADKgIAIgcgAioCCCIIkjgCACAEQWxqIgMgAyoCACIJIAIqAgySOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCCCACIAYgACoCAJQgByAAKgIElJM4AgwgAioCBCEGIARBYGoiAyADKgIAIgcgAioCACIIkjgCACAEQWRqIgQgBCoCACIJIAIqAgSSOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCACACIAYgACoCAJQgByAAKgIElJM4AgQgACAFaiEAIAMhBCACQWBqIgIgAU8NAAsLtwUBBH0gACAAKgJ8IgEgACoCPCICkjgCfCAAIAAqAngiAyAAKgI4IgSSOAJ4IAAgASACkzgCPCAAIAMgBJM4AjggACAAKgJwIgEgACoCMCICkjgCcCAAIAAqAnQiAyAAKgI0IgSSOAJ0IAAgASACkyIBQ16DbD+UIAMgBJMiAkMV78M+lJM4AjAgACABQxXvwz6UIAJDXoNsP5SSOAI0IAAgACoCaCIBIAAqAigiApI4AmggACAAKgJsIgMgACoCLCIEkjgCbCAAIAEgApMiASADIASTIgKSQ/MENT+UOAIsIAAgASACk0PzBDU/lDgCKCAAKgIgIQEgACoCYCECIAAgACoCZCIDIAAqAiQiBJI4AmQgACACIAGSOAJgIAAgAiABkyIBQ16DbD+UIAMgBJMiAkMV78M+lJI4AiQgACABQxXvwz6UIAJDXoNsP5STOAIgIAAqAhghASAAKgJYIQIgACAAKgIcIgMgACoCXCIEkjgCXCAAIAIgAZI4AlggACACIAGTOAIcIAAgAyAEkzgCGCAAKgJQIQEgACoCECECIAAgACoCFCIDIAAqAlQiBJI4AlQgACACIAGSOAJQIAAgAyAEkyIDQxXvwz6UIAIgAZMiAUNeg2w/lJM4AhQgACABQxXvwz6UIANDXoNsP5SSOAIQIAAqAkghASAAKgIIIQIgACAAKgIMIgMgACoCTCIEkjgCTCAAIAIgAZI4AkggACADIASTIgMgAiABkyIBk0PzBDU/lDgCDCAAIAEgA5JD8wQ1P5Q4AgggACoCQCEBIAAqAgAhAiAAIAAqAgQiAyAAKgJEIgSSOAJEIAAgAiABkjgCQCAAIAMgBJMiA0Neg2w/lCACIAGTIgFDFe/DPpSTOAIEIAAgAUNeg2w/lCADQxXvwz6UkjgCACAAEEMgAEFAaxBDC+4DAgJ/BH0gASACQQJ0aiEEIAEgAkEBdEF8cWpBYGohAgNAIAIqAhwhBSAEQXhqIgMgAyoCACIHIAIqAhgiCJI4AgAgBEF8aiIDIAMqAgAiBiACKgIckjgCACACIAYgBZMiBSAAKgIElCAHIAiTIgYgACoCAJSSOAIYIAIgBSAAKgIAlCAGIAAqAgSUkz
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

AAAD+UIgkgBCoCACIKIAYqAgAiC5IiDCABKgIIIg2UIAcgCJMiByABKgIMIgiUkiIOkjgCCCAAQXBqIgQgCSAOkzgCACADIAogC5NDAAAAP5QiCSAMIAiUIAcgDZSTIgeSOAIMIABBdGogByAJkzgCACACQRBqIQIgAUEQaiEBIANBEGoiAyAEIgBJDQALC4QEAgJ/BH0gASACQQJ0aiEEIAEgAkEBdEF8cWpBYGohAiADQQJ0IQUDQCACKgIcIQYgBEF4aiIDIAMqAgAiByACKgIYIgiSOAIAIARBfGoiAyADKgIAIgkgAioCHJI4AgAgAiAJIAaTIgYgACoCBJQgByAIkyIHIAAqAgCUkjgCGCACIAYgACoCAJQgByAAKgIElJM4AhwgAioCFCEGIARBcGoiAyADKgIAIgcgAioCECIIkjgCACAEQXRqIgMgAyoCACIJIAIqAhSSOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCECACIAYgACoCAJQgByAAKgIElJM4AhQgAioCDCEGIARBaGoiAyADKgIAIgcgAioCCCIIkjgCACAEQWxqIgMgAyoCACIJIAIqAgySOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCCCACIAYgACoCAJQgByAAKgIElJM4AgwgAioCBCEGIARBYGoiAyADKgIAIgcgAioCACIIkjgCACAEQWRqIgQgBCoCACIJIAIqAgSSOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCACACIAYgACoCAJQgByAAKgIElJM4AgQgACAFaiEAIAMhBCACQWBqIgIgAU8NAAsLtwUBBH0gACAAKgJ8IgEgACoCPCICkjgCfCAAIAAqAngiAyAAKgI4IgSSOAJ4IAAgASACkzgCPCAAIAMgBJM4AjggACAAKgJwIgEgACoCMCICkjgCcCAAIAAqAnQiAyAAKgI0IgSSOAJ0IAAgASACkyIBQ16DbD+UIAMgBJMiAkMV78M+lJM4AjAgACABQxXvwz6UIAJDXoNsP5SSOAI0IAAgACoCaCIBIAAqAigiApI4AmggACAAKgJsIgMgACoCLCIEkjgCbCAAIAEgApMiASADIASTIgKSQ/MENT+UOAIsIAAgASACk0PzBDU/lDgCKCAAKgIgIQEgACoCYCECIAAgACoCZCIDIAAqAiQiBJI4AmQgACACIAGSOAJgIAAgAiABkyIBQ16DbD+UIAMgBJMiAkMV78M+lJI4AiQgACABQxXvwz6UIAJDXoNsP5STOAIgIAAqAhghASAAKgJYIQIgACAAKgIcIgMgACoCXCIEkjgCXCAAIAIgAZI4AlggACACIAGTOAIcIAAgAyAEkzgCGCAAKgJQIQEgACoCECECIAAgACoCFCIDIAAqAlQiBJI4AlQgACACIAGSOAJQIAAgAyAEkyIDQxXvwz6UIAIgAZMiAUNeg2w/lJM4AhQgACABQxXvwz6UIANDXoNsP5SSOAIQIAAqAkghASAAKgIIIQIgACAAKgIMIgMgACoCTCIEkjgCTCAAIAIgAZI4AkggACADIASTIgMgAiABkyIBk0PzBDU/lDgCDCAAIAEgA5JD8wQ1P5Q4AgggACoCQCEBIAAqAgAhAiAAIAAqAgQiAyAAKgJEIgSSOAJEIAAgAiABkjgCQCAAIAMgBJMiA0Neg2w/lCACIAGTIgFDFe/DPpSTOAIEIAAgAUNeg2w/lCADQxXvwz6UkjgCACAAEEMgAEFAaxBDC+4DAgJ/BH0gASACQQJ0aiEEIAEgAkEBdEF8cWpBYGohAgNAIAIqAhwhBSAEQXhqIgMgAyoCACIHIAIqAhgiCJI4AgAgBEF8aiIDIAMqAgAiBiACKgIckjgCACACIAYgBZMiBSAAKgIElCAHIAiTIgYgACoCAJSSOAIYIAIgBSAAKgIAlCAGIAAqAgSUkz
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

AAAD+UIgkgBCoCACIKIAYqAgAiC5IiDCABKgIIIg2UIAcgCJMiByABKgIMIgiUkiIOkjgCCCAAQXBqIgQgCSAOkzgCACADIAogC5NDAAAAP5QiCSAMIAiUIAcgDZSTIgeSOAIMIABBdGogByAJkzgCACACQRBqIQIgAUEQaiEBIANBEGoiAyAEIgBJDQALC4QEAgJ/BH0gASACQQJ0aiEEIAEgAkEBdEF8cWpBYGohAiADQQJ0IQUDQCACKgIcIQYgBEF4aiIDIAMqAgAiByACKgIYIgiSOAIAIARBfGoiAyADKgIAIgkgAioCHJI4AgAgAiAJIAaTIgYgACoCBJQgByAIkyIHIAAqAgCUkjgCGCACIAYgACoCAJQgByAAKgIElJM4AhwgAioCFCEGIARBcGoiAyADKgIAIgcgAioCECIIkjgCACAEQXRqIgMgAyoCACIJIAIqAhSSOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCECACIAYgACoCAJQgByAAKgIElJM4AhQgAioCDCEGIARBaGoiAyADKgIAIgcgAioCCCIIkjgCACAEQWxqIgMgAyoCACIJIAIqAgySOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCCCACIAYgACoCAJQgByAAKgIElJM4AgwgAioCBCEGIARBYGoiAyADKgIAIgcgAioCACIIkjgCACAEQWRqIgQgBCoCACIJIAIqAgSSOAIAIAIgCSAGkyIGIAAgBWoiACoCBJQgByAIkyIHIAAqAgCUkjgCACACIAYgACoCAJQgByAAKgIElJM4AgQgACAFaiEAIAMhBCACQWBqIgIgAU8NAAsLtwUBBH0gACAAKgJ8IgEgACoCPCICkjgCfCAAIAAqAngiAyAAKgI4IgSSOAJ4IAAgASACkzgCPCAAIAMgBJM4AjggACAAKgJwIgEgACoCMCICkjgCcCAAIAAqAnQiAyAAKgI0IgSSOAJ0IAAgASACkyIBQ16DbD+UIAMgBJMiAkMV78M+lJM4AjAgACABQxXvwz6UIAJDXoNsP5SSOAI0IAAgACoCaCIBIAAqAigiApI4AmggACAAKgJsIgMgACoCLCIEkjgCbCAAIAEgApMiASADIASTIgKSQ/MENT+UOAIsIAAgASACk0PzBDU/lDgCKCAAKgIgIQEgACoCYCECIAAgACoCZCIDIAAqAiQiBJI4AmQgACACIAGSOAJgIAAgAiABkyIBQ16DbD+UIAMgBJMiAkMV78M+lJI4AiQgACABQxXvwz6UIAJDXoNsP5STOAIgIAAqAhghASAAKgJYIQIgACAAKgIcIgMgACoCXCIEkjgCXCAAIAIgAZI4AlggACACIAGTOAIcIAAgAyAEkzgCGCAAKgJQIQEgACoCECECIAAgACoCFCIDIAAqAlQiBJI4AlQgACACIAGSOAJQIAAgAyAEkyIDQxXvwz6UIAIgAZMiAUNeg2w/lJM4AhQgACABQxXvwz6UIANDXoNsP5SSOAIQIAAqAkghASAAKgIIIQIgACAAKgIMIgMgACoCTCIEkjgCTCAAIAIgAZI4AkggACADIASTIgMgAiABkyIBk0PzBDU/lDgCDCAAIAEgA5JD8wQ1P5Q4AgggACoCQCEBIAAqAgAhAiAAIAAqAgQiAyAAKgJEIgSSOAJEIAAgAiABkjgCQCAAIAMgBJMiA0Neg2w/lCACIAGTIgFDFe/DPpSTOAIEIAAgAUNeg2w/lCADQxXvwz6UkjgCACAAEEMgAEFAaxBDC+4DAgJ/BH0gASACQQJ0aiEEIAEgAkEBdEF8cWpBYGohAgNAIAIqAhwhBSAEQXhqIgMgAyoCACIHIAIqAhgiCJI4AgAgBEF8aiIDIAMqAgAiBiACKgIckjgCACACIAYgBZMiBSAAKgIElCAHIAiTIgYgACoCAJSSOAIYIAIgBSAAKgIAlCAGIAAqAgSUkz
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

0NERALDQ0QEA8RERQUDg8QERQJCwsPDwoNDBAPCw0NDxEOEA8SAA4QDxIUDA4OAAAODhAAAA0QDwAAERESAAAQERMTAAwODhIADBAOABENDw8SABASEQAREBIRAAAHCgoODgoMCw8PCgwMEA8NDw8SAA4PDxEACQsLDw8LDQ0QEAsMDRAQDg8QEREOEBAQEgkLDBAQCw0NERELDg0UEQ8QEBMADxARABMLDQ4REA4PDxQSDQ4PERMQEhIAFBAQExEADA8OEQAODw8SEw0QDxMUDxISABQRABAAQbCADAsRAgAAAAEAAAADAAAAAAAAAAQAQdCADAuLAgIFBAUGBgUGBgUGBgcICAYICAUGBgYICAcICAUHBgcICAYICAcICAgJCggKCgYICAgKCAgKCgUGBgYICAcICAYICAgKCggICgcICAgKCggKCQAAAAEAAAAAAAAAAgAAAAEEBAUIBwUHCAUICAgKCwgKCwUICAgLCggLCwQICAgLCwgLCwgLCwsNDgsODggLCwoODAsODgQICAgLCwgLCwcLCwsODgoMDggLCwsODgsODQAAAAEAAAAAAAAAAgAAAA4ODg8NDwwQCggHCQkIDBAKBQQGBQYJEA4IBggHCAoQDgcEBgMFCBAPCQUHBAQHEA0KBgcEAwQNDQwHCQUFBgwCAAAAQAAAAGAOAwBBkIMMCwOgAgMAQaCDDAsDyAIDAEGwgwwLA/ACAwBBwIMMCwMYAwMAQdCDDAsPQAMDAAAAAABoAwMAkAMDAEHogwwLC7gDAwDgAwMACAQDAEG4hAwLCwIAAABAAAAAYAIDAEHghAwLsQUFCQ4MDw0KDQcEBQYIBwgMDQQDBQUGCQ8MBgUGBgYHDg4HBAYEBggPDAYGBQUFBg4JBwgGBwUECgoNDg4PCgYIBAAAAFEAAAAADgMAAQAAAAAAEOAAABBgAgAAAAAAAABUDgMAAAAAAAQAAABRAAAAoA0DAAEAAAAAABDgAAAQYAIAAAAAAAAA9A0DAAAAAAAEAAAAcQIAAAALAwABAAAAAAAw4AAAEGADAAAAAAAAAIANAwAAAAAABAAAAHECAABgCAMAAQAAAAAAMOAAABBgAwAAAAAAAADgCgMAAAAAAAIAAABRAAAA0AcDAAEAAAAAAFDgAAAQYAQAAAAAAAAAMAgDAAAAAAACAAAAqQAAAOAGAwABAAAAAACe4AAAVGAEAAAAAAAAAJAHAwAAAAAAAgAAABkAAACgBgMAAQAAAAAAMOAAABBgAwAAAAAAAADABgMAAAAAAAIAAABRAAAAEAYDAAEAAAAAIDXhACD1YAQAAAAAAAAAcAYDAAAAAAACAAAAqQAAACAFAwABAAAAAIDT4AAAemAEAAAAAAAAANAFAwAAAAAAAgAAAKkAAAAwBAMAAQAAAAAAWOAAABBgBAAAAAAAAADgBAMAAAAAAAIFBQYGBwcIBwgICAgFBgYHBwgICAgICAgIBQYGBwcIBwgICAgICAYHBwcICAgICAkJCQkGBwcIBwgICQkJCQkJBwgICAgICAkJCQkJCQcICAgICAgJCQkJCQkICAgICQkJCQkJCQkJCAgICQkJCQkJCQkJCQgICQkJCQkJCQkJCQkICQkJCQkJCQkJCQkJCAkJCQkJCQkJCQkJCQgJCQkJCQkJCQkJCQkAAAAAAAAABgAAAAUAAAAHAAAABAAAAAgAAAADAAAACQAAAAIAAAAKAAAAAQAAAAsAAAAAAAAADABBoIoMC+EBAQQEBwYHBggHCQcJCAQHBggICQgKCQoKCwsEBwcICAgICQoLCwsLBggICgoKCgsLDAwMDAcICAoKCgoLCwwMDQ0HCQkLCgwMDQ0ODQ4OBwkJCgsLDA0NDQ0QDgkKCgwMDQ0ODg8QDxAJCgoMDAwNDg4ODxAPCgwMDQ0PDRAQDxEREQoLCwwODg4PDxERDxELDAwODg4PDw8REBERCgwMDQ4ODhEPEREREQAAAAAAAAAGAAAABQ
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Context Window Stuffing

Medium

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill attempts to fill the context window with filler content, displacing legitimate instructions and safety constraints. This can degrade agent performance or bypass safety boundaries.

Content

Scanner excerpt · openrouter-audio.js (reported line 239)May include surrounding context.

js

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
...[truncated 28 chars]

Static analysis

Detected: suspicious.env_credential_access

Environment variable access combined with network send.

Critical

• Code: suspicious.env_credential_access
• Location: openrouter-audio.js:370