Habilidades routemux-images

📦

routemux-images

Name: routemux-images
Author: rootfily-ai

Revisión del contenido r1 Riesgo alto ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos🔑 Variables de entorno

Generate and Edit Images with RouteMux

Coding agents can lose built-in image tools when routed through a custom API gateway. This skill uses RouteMux endpoints to generate or edit images.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Maintain this Skill? Claim it ⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "routemux-images" from https://skillstore.io/skills/rootfily-ai-routemux-images.md and its manifest at https://skillstore.io/api/skills/rootfily-ai-routemux-images/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/rootfily-ai-routemux-images.md Manifest firmado GET /api/skills/rootfily-ai-routemux-images/manifest Lockfile firmado GET /api/skills/rootfily-ai-routemux-images/lockfile

Pruébalo

Usando "routemux-images". Create a square app icon showing a white compass on a green field.

Resultado esperado:

Saved the generated icon to the requested project path. The response used the selected RouteMux image model.

Usando "routemux-images". Edit the supplied office photo so the wall is light gray while preserving the furniture.

Resultado esperado:

Saved the edited photo to the requested path and reported the model that completed the edit.

Usando "routemux-images". Generate a wide editorial illustration and verify its dimensions.

Resultado esperado:

Saved one generated illustration to the requested path.
Reported the requested aspect ratio, actual file dimensions, and responding model.

Auditoría de seguridad

Riesgo alto

v1 • 15/9/2026 Abrir el informe versionado

The skill intentionally uses curl, RouteMux network endpoints, a dedicated API key, and user-selected files. Most backtick alerts are Markdown false positives, but unsafe shell interpolation and plaintext shell-profile storage create credible risks.

Archivos escaneados

103

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (2)

Alto

SKILL.md:44 SKILL.md:69

Shell Injection Through Prompt and Path Placeholders

User-derived prompt and path placeholders appear directly in shell command templates without structured argument handling.

The prompt is placed inside shell quotes and the image path is unquoted, allowing metacharacters to alter command interpretation.

Medio

SKILL.md:54

Unvalidated Response URL Download

The workflow instructs the agent to download any URL returned by the service without scheme, host, size, or content validation.

The download instruction is explicit, while safeguards for service-controlled URLs are absent.

Elementos de revisión de capacidades (9)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Alto

SKILL.md:27

Hidden file in home directory

Add that line to ~/.zshrc (or ~/.bashrc) so new terminals have it too.

The instructions recommend persisting the plaintext API key in a shell profile under the user's home directory.

Alto

SKILL.md:27

Hidden file access

Add that line to ~/.zshrc (or ~/.bashrc) so new terminals have it too.

The setup guidance directs users to modify hidden shell configuration files with a persistent plaintext secret.

Medio

SKILL.md:36-39

Ruby/shell backtick execution

```bash

The fenced block invokes curl and sends an authorization header to RouteMux to retrieve the model catalogue.

Medio

SKILL.md:43-45

Ruby/shell backtick execution

```bash

The fenced block instructs the agent to execute a local image-generation shell script with user-derived arguments.

Medio

SKILL.md:47-52

Ruby/shell backtick execution

```bash

The fenced block invokes curl to submit image prompts and credentials to the RouteMux generation endpoint.

Medio

SKILL.md:64-70

Ruby/shell backtick execution

```bash

The fenced block invokes curl to upload an image and API credential to the RouteMux editing endpoint.

Bajo

SKILL.md:37

Hardcoded URL

curl -s "https://api.routemux.com/v1/models?capability=image_generation" \

The skill intentionally queries the RouteMux API and transmits its API credential over the network.

Bajo

SKILL.md:48

Hardcoded URL

curl -s https://api.routemux.com/v1/images/generations \

The skill intentionally sends the user's prompt and API credential to the RouteMux generation endpoint.

Bajo

SKILL.md:65

Hardcoded URL

curl -s https://api.routemux.com/v1/images/edits \

The skill intentionally uploads an input image, edit prompt, and API credential to RouteMux.

Factores de riesgo

⚙️ Comandos externos (26)

🌐 Acceso a red (5)

SKILL.md:23 SKILL.md:37 SKILL.md:48 SKILL.md:65 SKILL.md:83

📁 Acceso al sistema de archivos (2)

SKILL.md:27 SKILL.md:27

🔑 Variables de entorno (7)

SKILL.md:3 SKILL.md:19 SKILL.md:25 SKILL.md:38 SKILL.md:49 SKILL.md:66 SKILL.md:94

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/rootfily-ai-routemux-images/security.svg)](https://skillstore.io/skills/rootfily-ai-routemux-images?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/rootfily-ai-routemux-images?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/rootfily-ai-routemux-images/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/rootfily-ai-routemux-images.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

rootfily-ai. (2026). routemux-images security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1

Cita BibTeX

@techreport{rootfily-ai-rootfily-ai-routemux-images-2026,
  author = {rootfily-ai},
  title = {routemux-images security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "routemux-images security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "rootfily-ai"
date-released: "2026-09-15"
url: "https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1"
identifiers:
  - type: other
    value: "skillstore:rootfily-ai-routemux-images:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Create Product Visuals

Generate a focused product mockup and save it inside the active project.

Produce Application Assets

Create icons, illustrations, or backgrounds when built-in image tools are unavailable.

Revise Existing Artwork

Upload an image and request a targeted visual change through RouteMux.

Prueba estos prompts

Generate a Simple Image

Generate an image of [subject] in [style]. Save it as [output path].

Set Composition and Ratio

Create [subject] with [composition], [lighting], and [color palette]. Use a [aspect ratio] format and save it to [output path].

Edit an Existing Image

Edit [input image path] to [requested change]. Preserve [elements to keep] and save the result as [output path].

Choose and Verify a Model

Query current RouteMux image models, select one suitable for [requirements], create [image brief], verify the returned dimensions, and report the responding model.

Mejores prácticas

Provide a precise subject, composition, style, and aspect ratio.
Choose an output path inside the active working directory.
Review the reported model and actual dimensions before using the asset.

Evitar

Do not place real API keys in prompts, files, logs, or replies.
Do not request many variants in one call to reduce network usage.
Do not assume a model slug or exact pixel size remains stable.

Preguntas frecuentes

What credential does this skill require?

It requires ROUTEMUX_API_KEY in the environment and should not search other credential stores.

Can it edit an existing image?

Yes. It uploads one input image with a text instruction to the RouteMux editing endpoint.

How does it choose an image model?

It queries the live RouteMux catalogue and selects a model that supports image generation.

Can it guarantee exact dimensions?

No. The requested size reliably guides aspect ratio, but upstream models may return different pixel dimensions.

Where does it save generated images?

It saves each image to the user-selected artifact path, normally inside the active working directory.

What happens when RouteMux returns an error?

It interprets documented errors, limits retries for temporary failures, and reports the request identifier when available.

Detalles del desarrollador

Autor

rootfily-ai

Licencia

MIT

Revisión de Skillstore

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/rootfily-ai/routemux-skills/tree/041099c5f56b99c9ca8805b8ef206f050b2f8da4/skills/routemux-images

Ref.

f6aa6f4e154bf3a8f90ac2069cbe691b8c5a5980

Actualidad del mantenimiento

15/9/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md