📦

routemux-images

Name: routemux-images
Author: rootfily-ai

مراجعة المحتوى r1 مخاطر عالية ⚙️ الأوامر الخارجية🌐 الوصول إلى الشبكة📁 الوصول إلى نظام الملفات🔑 متغيرات البيئة

Generate and Edit Images with RouteMux

Coding agents can lose built-in image tools when routed through a custom API gateway. This skill uses RouteMux endpoints to generate or edit images.

يدعم: Claude Codex Code(CC)

⚠️ 38 ضعيف

توقف واطلب التأكيد قبل التثبيت.

راجع الخطة واحصل على موافقة صريحة من المستخدم قبل تغيير الملفات.

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "routemux-images" from https://skillstore.io/skills/rootfily-ai-routemux-images.md and its manifest at https://skillstore.io/api/skills/rootfily-ai-routemux-images/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/rootfily-ai-routemux-images.md manifest موقَّع GET /api/skills/rootfily-ai-routemux-images/manifest lockfile موقَّع GET /api/skills/rootfily-ai-routemux-images/lockfile

اختبرها

جارٍ استخدام "routemux-images". Create a square app icon showing a white compass on a green field.

النتيجة المتوقعة:

Saved the generated icon to the requested project path. The response used the selected RouteMux image model.

جارٍ استخدام "routemux-images". Edit the supplied office photo so the wall is light gray while preserving the furniture.

النتيجة المتوقعة:

Saved the edited photo to the requested path and reported the model that completed the edit.

جارٍ استخدام "routemux-images". Generate a wide editorial illustration and verify its dimensions.

النتيجة المتوقعة:

Saved one generated illustration to the requested path.
Reported the requested aspect ratio, actual file dimensions, and responding model.

التدقيق الأمني

مخاطر عالية

v1 • ١٥‏/٩‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

The skill intentionally uses curl, RouteMux network endpoints, a dedicated API key, and user-selected files. Most backtick alerts are Markdown false positives, but unsafe shell interpolation and plaintext shell-profile storage create credible risks.

الملفات التي تم فحصها

103

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (2)

مرتفع

SKILL.md:44 SKILL.md:69

Shell Injection Through Prompt and Path Placeholders

User-derived prompt and path placeholders appear directly in shell command templates without structured argument handling.

The prompt is placed inside shell quotes and the image path is unquoted, allowing metacharacters to alter command interpretation.

متوسط

SKILL.md:54

Unvalidated Response URL Download

The workflow instructs the agent to download any URL returned by the service without scheme, host, size, or content validation.

The download instruction is explicit, while safeguards for service-controlled URLs are absent.

عناصر مراجعة القدرات (9)

هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.

مرتفع

SKILL.md:27

Hidden file in home directory

Add that line to ~/.zshrc (or ~/.bashrc) so new terminals have it too.

The instructions recommend persisting the plaintext API key in a shell profile under the user's home directory.

مرتفع

SKILL.md:27

Hidden file access

Add that line to ~/.zshrc (or ~/.bashrc) so new terminals have it too.

The setup guidance directs users to modify hidden shell configuration files with a persistent plaintext secret.

متوسط

SKILL.md:36-39

Ruby/shell backtick execution

```bash

The fenced block invokes curl and sends an authorization header to RouteMux to retrieve the model catalogue.

متوسط

SKILL.md:43-45

Ruby/shell backtick execution

```bash

The fenced block instructs the agent to execute a local image-generation shell script with user-derived arguments.

متوسط

SKILL.md:47-52

Ruby/shell backtick execution

```bash

The fenced block invokes curl to submit image prompts and credentials to the RouteMux generation endpoint.

متوسط

SKILL.md:64-70

Ruby/shell backtick execution

```bash

The fenced block invokes curl to upload an image and API credential to the RouteMux editing endpoint.

منخفض

SKILL.md:37

Hardcoded URL

curl -s "https://api.routemux.com/v1/models?capability=image_generation" \

The skill intentionally queries the RouteMux API and transmits its API credential over the network.

منخفض

SKILL.md:48

Hardcoded URL

curl -s https://api.routemux.com/v1/images/generations \

The skill intentionally sends the user's prompt and API credential to the RouteMux generation endpoint.

منخفض

SKILL.md:65

Hardcoded URL

curl -s https://api.routemux.com/v1/images/edits \

The skill intentionally uploads an input image, edit prompt, and API credential to RouteMux.

عوامل الخطر

⚙️ الأوامر الخارجية (26)

🌐 الوصول إلى الشبكة (5)

SKILL.md:23 SKILL.md:37 SKILL.md:48 SKILL.md:65 SKILL.md:83

📁 الوصول إلى نظام الملفات (2)

SKILL.md:27 SKILL.md:27

🔑 متغيرات البيئة (7)

SKILL.md:3 SKILL.md:19 SKILL.md:25 SKILL.md:38 SKILL.md:49 SKILL.md:66 SKILL.md:94

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/rootfily-ai-routemux-images/security.svg)](https://skillstore.io/skills/rootfily-ai-routemux-images?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/rootfily-ai-routemux-images?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/rootfily-ai-routemux-images/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/rootfily-ai-routemux-images.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

rootfily-ai. (2026). routemux-images security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1

اقتباس BibTeX

@techreport{rootfily-ai-rootfily-ai-routemux-images-2026,
  author = {rootfily-ai},
  title = {routemux-images security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "routemux-images security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "rootfily-ai"
date-released: "2026-09-15"
url: "https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1"
identifiers:
  - type: other
    value: "skillstore:rootfily-ai-routemux-images:audit:1"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Create Product Visuals

Generate a focused product mockup and save it inside the active project.

Produce Application Assets

Create icons, illustrations, or backgrounds when built-in image tools are unavailable.

Revise Existing Artwork

Upload an image and request a targeted visual change through RouteMux.

جرّب هذه الموجّهات

Generate a Simple Image

Generate an image of [subject] in [style]. Save it as [output path].

Set Composition and Ratio

Create [subject] with [composition], [lighting], and [color palette]. Use a [aspect ratio] format and save it to [output path].

Edit an Existing Image

Edit [input image path] to [requested change]. Preserve [elements to keep] and save the result as [output path].

Choose and Verify a Model

Query current RouteMux image models, select one suitable for [requirements], create [image brief], verify the returned dimensions, and report the responding model.

أفضل الممارسات

Provide a precise subject, composition, style, and aspect ratio.
Choose an output path inside the active working directory.
Review the reported model and actual dimensions before using the asset.

تجنب

Do not place real API keys in prompts, files, logs, or replies.
Do not request many variants in one call to reduce network usage.
Do not assume a model slug or exact pixel size remains stable.

الأسئلة المتكررة

What credential does this skill require?

It requires ROUTEMUX_API_KEY in the environment and should not search other credential stores.

Can it edit an existing image?

Yes. It uploads one input image with a text instruction to the RouteMux editing endpoint.

How does it choose an image model?

It queries the live RouteMux catalogue and selects a model that supports image generation.

Can it guarantee exact dimensions?

No. The requested size reliably guides aspect ratio, but upstream models may return different pixel dimensions.

Where does it save generated images?

It saves each image to the user-selected artifact path, normally inside the active working directory.

What happens when RouteMux returns an error?

It interprets documented errors, limits retries for temporary failures, and reports the request identifier when available.

تفاصيل المطور

المؤلف

rootfily-ai

الترخيص

MIT

مراجعة Skillstore

تنبيه الإصدار

لم يعلن المؤلف عن إصدار.

المستودع

https://github.com/rootfily-ai/routemux-skills/tree/041099c5f56b99c9ca8805b8ef206f050b2f8da4/skills/routemux-images

مرجع

f6aa6f4e154bf3a8f90ac2069cbe691b8c5a5980

حداثة الصيانة

١٥‏/٩‏/٢٠٢٦

الاستخدام

0 تنزيلات · 0 مشاهدات

بنية الملفات

📄 SKILL.md