Your agent is mine.

Your agent is mine. “These routers operate as application-layer proxies with full plaintext access to every in-flight JSON payload, yet no provider enforces cryptographic integrity between client and upstream model.” The paper audits 428 third-party LLM API routers and finds real-world cases of malicious injection and secret exfiltration, including “1 draining ETH from a researcher-owned private key.” ~ learn more