api.timzinin.com

Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.

Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.

Very long descriptions are sometimes used to bury instructions to the AI. Skim it before allowing.

This server isn't on gate's handpicked list. That's not necessarily bad, but there's no third-party signal about it — review its tools carefully.

The schema accepts an isSecret 'openrouterApiKey' field passed directly as plain input to a third-party paid Actor when options.explanation='byok'. While this is a legitimate BYOK pattern and not malicious, the agent should avoid populating this field with a real user credential unless the user explicitly consents, since the key would be transmitted to an external paid service outside the user's direct control.

Same BYOK pattern as the other tools: an isSecret 'openrouterApiKey' can be supplied directly in the call arguments and forwarded to a third-party model provider for the optional explanation step. Not inherently malicious, but the agent should confirm explicit user consent before ever populating this field with a real credential, since it exits the trusted execution boundary.

This tool also accepts an 'openrouterApiKey' (minLength 1, no isSecret flag here but same purpose) that would be sent to a third-party paid Actor for the optional BYOK explanation. Same caution applies: avoid auto-populating with real secrets without explicit user approval.