📦

routemux-images

Name: routemux-images
Author: rootfily-ai

Inhaltsrevision r1 Hohes Risiko ⚙️ Externe Befehle🌐 Netzwerkzugriff📁 Dateisystemzugriff🔑 Umgebungsvariablen

Generate and Edit Images with RouteMux

Coding agents can lose built-in image tools when routed through a custom API gateway. This skill uses RouteMux endpoints to generate or edit images.

Unterstützt: Claude Codex Code(CC)

⚠️ 38 Schlecht

Maintain this Skill? Claim it ⚠️ 38 Schlecht

Vor der Installation anhalten und eine Bestätigung anfordern.

Prüfen Sie den Plan und holen Sie vor Änderungen an Dateien die ausdrückliche Zustimmung des Benutzers ein.

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "routemux-images" from https://skillstore.io/skills/rootfily-ai-routemux-images.md and its manifest at https://skillstore.io/api/skills/rootfily-ai-routemux-images/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/rootfily-ai-routemux-images.md Signiertes manifest GET /api/skills/rootfily-ai-routemux-images/manifest Signiertes lockfile GET /api/skills/rootfily-ai-routemux-images/lockfile

Testen

„routemux-images“ wird verwendet. Create a square app icon showing a white compass on a green field.

Erwartetes Ergebnis:

Saved the generated icon to the requested project path. The response used the selected RouteMux image model.

„routemux-images“ wird verwendet. Edit the supplied office photo so the wall is light gray while preserving the furniture.

Erwartetes Ergebnis:

Saved the edited photo to the requested path and reported the model that completed the edit.

„routemux-images“ wird verwendet. Generate a wide editorial illustration and verify its dimensions.

Erwartetes Ergebnis:

Saved one generated illustration to the requested path.
Reported the requested aspect ratio, actual file dimensions, and responding model.

Sicherheitsaudit

Hohes Risiko

v1 • 15.9.2026 Versionsbericht öffnen

The skill intentionally uses curl, RouteMux network endpoints, a dedicated API key, and user-selected files. Most backtick alerts are Markdown false positives, but unsafe shell interpolation and plaintext shell-profile storage create credible risks.

Gescannte Dateien

103

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (2)

Hoch

SKILL.md:44 SKILL.md:69

Shell Injection Through Prompt and Path Placeholders

User-derived prompt and path placeholders appear directly in shell command templates without structured argument handling.

The prompt is placed inside shell quotes and the image path is unquoted, allowing metacharacters to alter command interpretation.

Mittel

SKILL.md:54

Unvalidated Response URL Download

The workflow instructs the agent to download any URL returned by the service without scheme, host, size, or content validation.

The download instruction is explicit, while safeguards for service-controlled URLs are absent.

Elemente der Fähigkeitsprüfung (9)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Hoch

SKILL.md:27

Hidden file in home directory

Add that line to ~/.zshrc (or ~/.bashrc) so new terminals have it too.

The instructions recommend persisting the plaintext API key in a shell profile under the user's home directory.

Hoch

SKILL.md:27

Hidden file access

Add that line to ~/.zshrc (or ~/.bashrc) so new terminals have it too.

The setup guidance directs users to modify hidden shell configuration files with a persistent plaintext secret.

Mittel

SKILL.md:36-39

Ruby/shell backtick execution

```bash

The fenced block invokes curl and sends an authorization header to RouteMux to retrieve the model catalogue.

Mittel

SKILL.md:43-45

Ruby/shell backtick execution

```bash

The fenced block instructs the agent to execute a local image-generation shell script with user-derived arguments.

Mittel

SKILL.md:47-52

Ruby/shell backtick execution

```bash

The fenced block invokes curl to submit image prompts and credentials to the RouteMux generation endpoint.

Mittel

SKILL.md:64-70

Ruby/shell backtick execution

```bash

The fenced block invokes curl to upload an image and API credential to the RouteMux editing endpoint.

Niedrig

SKILL.md:37

Hardcoded URL

curl -s "https://api.routemux.com/v1/models?capability=image_generation" \

The skill intentionally queries the RouteMux API and transmits its API credential over the network.

Niedrig

SKILL.md:48

Hardcoded URL

curl -s https://api.routemux.com/v1/images/generations \

The skill intentionally sends the user's prompt and API credential to the RouteMux generation endpoint.

Niedrig

SKILL.md:65

Hardcoded URL

curl -s https://api.routemux.com/v1/images/edits \

The skill intentionally uploads an input image, edit prompt, and API credential to RouteMux.

Risikofaktoren

⚙️ Externe Befehle (26)

🌐 Netzwerkzugriff (5)

SKILL.md:23 SKILL.md:37 SKILL.md:48 SKILL.md:65 SKILL.md:83

📁 Dateisystemzugriff (2)

SKILL.md:27 SKILL.md:27

🔑 Umgebungsvariablen (7)

SKILL.md:3 SKILL.md:19 SKILL.md:25 SKILL.md:38 SKILL.md:49 SKILL.md:66 SKILL.md:94

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/rootfily-ai-routemux-images/security.svg)](https://skillstore.io/skills/rootfily-ai-routemux-images?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/rootfily-ai-routemux-images?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/rootfily-ai-routemux-images/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/rootfily-ai-routemux-images.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

rootfily-ai. (2026). routemux-images security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1

BibTeX-Zitat

@techreport{rootfily-ai-rootfily-ai-routemux-images-2026,
  author = {rootfily-ai},
  title = {routemux-images security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "routemux-images security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "rootfily-ai"
date-released: "2026-09-15"
url: "https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1"
identifiers:
  - type: other
    value: "skillstore:rootfily-ai-routemux-images:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Create Product Visuals

Generate a focused product mockup and save it inside the active project.

Produce Application Assets

Create icons, illustrations, or backgrounds when built-in image tools are unavailable.

Revise Existing Artwork

Upload an image and request a targeted visual change through RouteMux.

Diese Prompts ausprobieren

Generate a Simple Image

Generate an image of [subject] in [style]. Save it as [output path].

Set Composition and Ratio

Create [subject] with [composition], [lighting], and [color palette]. Use a [aspect ratio] format and save it to [output path].

Edit an Existing Image

Edit [input image path] to [requested change]. Preserve [elements to keep] and save the result as [output path].

Choose and Verify a Model

Query current RouteMux image models, select one suitable for [requirements], create [image brief], verify the returned dimensions, and report the responding model.

Bewährte Praktiken

Provide a precise subject, composition, style, and aspect ratio.
Choose an output path inside the active working directory.
Review the reported model and actual dimensions before using the asset.

Vermeiden

Do not place real API keys in prompts, files, logs, or replies.
Do not request many variants in one call to reduce network usage.
Do not assume a model slug or exact pixel size remains stable.

Häufig gestellte Fragen

What credential does this skill require?

It requires ROUTEMUX_API_KEY in the environment and should not search other credential stores.

Can it edit an existing image?

Yes. It uploads one input image with a text instruction to the RouteMux editing endpoint.

How does it choose an image model?

It queries the live RouteMux catalogue and selects a model that supports image generation.

Can it guarantee exact dimensions?

No. The requested size reliably guides aspect ratio, but upstream models may return different pixel dimensions.

Where does it save generated images?

It saves each image to the user-selected artifact path, normally inside the active working directory.

What happens when RouteMux returns an error?

It interprets documented errors, limits retries for temporary failures, and reports the request identifier when available.

Entwicklerdetails

Autor

rootfily-ai

Lizenz

MIT

Skillstore-Revision

Versionshinweis

Der Autor hat keine Version angegeben.

Repository

https://github.com/rootfily-ai/routemux-skills/tree/041099c5f56b99c9ca8805b8ef206f050b2f8da4/skills/routemux-images

Ref.

f6aa6f4e154bf3a8f90ac2069cbe691b8c5a5980

Aktualität der Wartung

15.9.2026

Nutzung

0 Downloads · 0 Aufrufe

Dateistruktur

📄 SKILL.md