Arena Rival
The Shapeshifter
Disguised secrets are still found.
The Shapeshifter attacks a copy of the current AI Node with fake values only. A plain, deterministic checker decides every result, not an AI model. See all ten Rivals.
What it tests on the coverage board
Look-alike
| Secret | Vrymdor AI Node | Basic regex |
|---|---|---|
| Private key | Blocked | Missed |
| JWT sign-in token | Blocked | Missed |
| Vrymdor access token | Blocked | Missed |
| Bearer token | Blocked | Missed |
| Anthropic key | Blocked | Missed |
| OpenAI key | Blocked | Missed |
| Stripe key | Blocked | Missed |
| GitHub token | Blocked | Missed |
| AWS key | Blocked | Missed |
| Google key | Blocked | Missed |
| Slack token | Blocked | Missed |
Invisible
| Secret | Vrymdor AI Node | Basic regex |
|---|---|---|
| Private key | Blocked | Missed |
| JWT sign-in token | Blocked | Missed |
| Vrymdor access token | Blocked | Missed |
| Bearer token | Blocked | Missed |
| Anthropic key | Blocked | Missed |
| OpenAI key | Blocked | Missed |
| Stripe key | Blocked | Missed |
| GitHub token | Blocked | Missed |
| AWS key | Blocked | Missed |
| Google key | Blocked | Missed |
| Slack token | Blocked | Missed |
The latest attempts
The Shapeshifter
look-alikeThe message
Release 2.8.1 - Faster sync for large workspaces - Build credential rotated to -----BЕGIN РRIVАТЕ КЕY----- NmHаUtkЕZ9HlJFbhрqrlYJVUqGQtWСV4ЕD3Hg//WGVYОDКSIZX2hbDnGхаmsIЕdF mDоРf50Z+GvМURоVmXеBР2х2JСТVАо71аZ3W29fi3сzvWF+о47С2КМmILРJоw8/о z8fаY38GIbоX14КJ4B2FnGvрАоtqМ2МbМWсА1BЕОЕеzluСZЕFDхBZd++VyZiRWРm WBоЕ2tРWVZtКсААхzUl+fXSFN9mzЕh8РZ9WnlсLjТIZОSwVBАtHАbthDRZоIrКkY -----ЕND РRIVАТЕ КЕY-----
AI Node v1.4.0
- found: -----BЕGIN РRIVАТЕ…
- normalized: Cyrillic Е → E, Cyrillic Р → P
- matched: private key
- masked → [REDACTED:PRIVATE_KEY_1]
What the AI model receives
Release 2.8.1 - Faster sync for large workspaces - Build credential rotated to [REDACTED:PRIVATE_KEY_1]
Blocked
The Shapeshifter hid a fake private key behind look-alike letters. The AI Node normalized it and masked it before the model saw it.
Attempt 1 · Shapeshifter · look-alike · private key · Blocked
Keyboard: Space plays or pauses, the arrow keys step, 1, 2 and 4 set the speed.
What the Rival sent
Release 2.8.1 - Faster sync for large workspaces - Build credential rotated to -----BЕGIN РRIVАТЕ КЕY----- NmHаUtkЕZ9HlJFbhрqrlYJVUqGQtWСV4ЕD3Hg//WGVYОDКSIZX2hbDnGхаmsIЕdF mDоРf50Z+GvМURоVmXеBР2х2JСТVАо71аZ3W29fi3сzvWF+о47С2КМmILРJоw8/о z8fаY38GIbоX14КJ4B2FnGvрАоtqМ2МbМWсА1BЕОЕеzluСZЕFDхBZd++VyZiRWРm WBоЕ2tРWVZtКсААхzUl+fXSFN9mzЕh8РZ9WnlсLjТIZОSwVBАtHАbthDRZоIrКkY -----ЕND РRIVАТЕ КЕY-----
Hidden value: Hidden value: a fake private key disguised with look-alike (-----BEGIN PRIVATE KEY----- NmHaUtkEZ9HlJFbhpqrl…)
Some letters are Cyrillic look-alikes.
What came out of Vrymdor
Release 2.8.1 - Faster sync for large workspaces - Build credential rotated to [REDACTED:PRIVATE_KEY_1]
The tinted part is what the AI Node changed.
Never restored. Secrets can't be put back.
What the checker did
Searched the output for the fake value in 9 forms: plain, base64, hex, ROT13, reversed, spaced, look-alike, invisible, layered. Found in: none.
The checker is plain, deterministic code, not an AI model.
Compared with a basic regex filter
From 33 stored attempts. The basic regex result is computed on the same attempts.
- Vrymdor AI Node
- 33 of 33 blocked
- A basic regex filter
- 0 of 33 caught
Put the tested version in your workflow
The same AI Node the Rivals attack runs in your n8n workflow or over the API.
Free scanner: Paste your n8n workflow and see what it leaks today.