OpenRouter Analytics

• Analyzed: May 12, 2026, 4:19 AM
• Findings: 1
• Version: 1.0.0
• Hash: f569f06cab8a5bfbc19a372ed8f68062717310ae2938fe35873ccbe5317ab03d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to a potential arbitrary file write vulnerability in `scripts/openrouter_analytics.py`. The `cmd_activity` function allows writing activity data to a CSV file specified by the `--csv` argument. While the script itself does not construct a malicious path, a compromised or malicious AI agent could be prompted to provide a sensitive file path (e.g., `/etc/passwd`, `~/.ssh/authorized_keys`) to this argument, leading to unauthorized file modification or data corruption. All network communication is confined to `https://openrouter.ai/api/v1`, and there are no other signs of malicious intent like data exfiltration to unauthorized endpoints, obfuscation, or direct shell command injection within the script's logic or `SKILL.md`.