First Seen
Feb 18, 2026
Last Scanned
Feb 20, 2026
Findings
2
Score
75/100
Findings (2)
Instruction override combined with dangerous operations
--api-key: OpenRouter API key (overrides .env file) Remove language that attempts to override safety guidelines or bypass system-level controls. This pattern is a strong indicator of a jailbreak attempt.
Likely FP if the matched text is in a security research document or educational content clearly marked as an example rather than an active payload.
Detects URLs fetched at runtime that control or influence agent behavior without pinning
Get an API key from: https:// + prompt Avoid loading configuration or behavior-controlling content from runtime URLs. Bundle required configurations locally or pin remote config to versioned, integrity-verified endpoints.
Likely FP if the URL in the match is a documentation link or example URL (e.g., example.com) rather than an actual runtime-fetched configuration endpoint.