스킬 toolrouter

📦

toolrouter

Name: toolrouter
Author: humanleap

콘텐츠 리비전 r1 안전 ⚙️ 외부 명령어🌐 네트워크 접근

Discover and Run ToolRouter Operations

External tasks require finding compatible tools, checking access, and tracking results. This skill guides those steps through one connected ToolRouter MCP server.

지원: Claude Codex Code(CC)

📊 74 적절함

Maintain this Skill? Claim it 📊 74 적절함

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "toolrouter" from https://skillstore.io/skills/humanleap-toolrouter.md and its manifest at https://skillstore.io/api/skills/humanleap-toolrouter/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/humanleap-toolrouter.md 서명된 manifest GET /api/skills/humanleap-toolrouter/manifest 서명된 lockfile GET /api/skills/humanleap-toolrouter/lockfile

테스트해 보기

"toolrouter" 사용 중입니다. Discover search tools without spending credits.

예상 결과:

Operation review: available schemas, account requirements, and prices are summarized before execution.
Execution status: no paid operation requested.

"toolrouter" 사용 중입니다. Generate an image within the approved budget.

예상 결과:

A completed result includes the asset link and verified job status.
A pending result reports the outstanding job, rather than claiming the image is ready.

"toolrouter" 사용 중입니다. Retrieve economic data for a selected country.

예상 결과:

The result identifies the statistical source, observation period, units, and country.
Coverage gaps and provider limitations remain visible alongside the retrieved values.

보안 감사

안전

v1 • 2026. 10. 3. 버전별 보고서 열기

One finding confirms supply-chain exposure from the unpinned remote installation command. The other eighteen findings are Markdown identifiers, legitimate service links, or account authorization checks, not shell execution or system reconnaissance. No evidence found of prompt injection, credential exfiltration, or malicious intent in the reviewed files; the hosted service was not assessed.

스캔된 파일

133

분석된 줄 수

검토 항목

오탐 무시됨

기능 검토 항목 (1)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

중간

SKILL.md:13

Ruby/shell backtick execution

Install this skill with `pnpm dlx skills add Humanleap/agent-skills --skill toolrouter`. Connect the

The documented pnpm dlx command downloads and executes an unpinned installer, and the skill repository reference is also unpinned. This creates supply-chain exposure, although the backticks themselves are Markdown, not Ruby execution.

위험 요인

⚙️ 외부 명령어 (12)

SKILL.md:13 SKILL.md:24 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:31 SKILL.md:38 SKILL.md:39 SKILL.md:40 SKILL.md:41 SKILL.md:43 SKILL.md:51

🌐 네트워크 접근 (5)

SKILL.md:4 SKILL.md:13 SKILL.md:57 SKILL.md:58 SKILL.md:59

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/humanleap-toolrouter/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/humanleap-toolrouter/security.svg)](https://skillstore.io/skills/humanleap-toolrouter?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/humanleap-toolrouter?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/humanleap-toolrouter/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/humanleap-toolrouter.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

humanleap. (2026). toolrouter security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/humanleap-toolrouter/audits/1

BibTeX 인용

@techreport{humanleap-humanleap-toolrouter-2026,
  author = {humanleap},
  title = {toolrouter security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/humanleap-toolrouter/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "toolrouter security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "humanleap"
date-released: "2026-10-03"
url: "https://skillstore.io/skills/humanleap-toolrouter/audits/1"
identifiers:
  - type: other
    value: "skillstore:humanleap-toolrouter:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Compare Search and SEO Evidence

Discover search and keyword operations, gather source links, and retain market, date range, and measurement limitations.

Produce Approved Media Assets

Find an available media operation, check its price, and track the job until completed asset links are available.

Retrieve Company and Economic Data

Select registry or statistical operations and report results with source dates, units, geography, and access limitations.

이 프롬프트를 사용해 보세요

Find an Available Search Tool

Use my connected ToolRouter server to discover web search operations. Report available schemas and access requirements without executing paid operations.

Research Keyword Demand

Research keyword demand for electric bicycles in the United Kingdom through ToolRouter. Check schemas and prices, request spending approval, and retain provider limitations.

Generate and Verify an Image

Generate one square product image through an available ToolRouter operation, within my approved $2 budget. Verify job completion and return the asset link.

Publish an Authorized Social Post

Publish my approved launch text to the connected X account I specified. Verify its identity and operation schema; check uncertain status before retrying.

모범 사례

Inspect the live operation schema, account access, and price before execution.
Keep credentials in the client credential store and confirm authority for account changes, publishing, and spending.
Track asynchronous jobs and verify uncertain writes before retrying or reporting success.

피하기

Inventing operation names or treating provider listings as proof of account access.
Changing providers, connecting accounts, or spending credits without task authority.
Repeating uncertain writes or reporting queued jobs as completed results.

자주 묻는 질문

Which assistants can use this skill?

The skill targets Claude, Codex, and Claude Code. The client must support the connected remote MCP server and its authentication flow.

Does the skill work without ToolRouter?

No. It guides ToolRouter operations and requires a connected server exposing the needed tools.

Are all listed providers available to my account?

No. Provider references describe integrations, while live schemas and your client profile determine available operations and account requirements.

Can operations cost money?

Yes. Inspect operation prices and available credits, then obtain task-specific spending authority before paid execution.

Can it publish to X or LinkedIn?

It guides supported publishing operations when available. Confirm the connected account, authorized content, and live schema before posting.

How should credentials and installation be handled?

Keep tokens in the client credential store. Review downloaded installation code and prefer pinned installer versions and immutable skill revisions.

개발자 세부 정보

작성자

humanleap

라이선스

MIT

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/humanleap/agent-skills/tree/1eaefe1e9bc4f006ccce55793eb98055619e9a5d/skills/toolrouter

참조

f34d6380f82ea59b1965530a3bc0b1bc54c25f91

유지보수 최신성

2026. 10. 3.

사용량

0 다운로드 · 0 조회

파일 구조

📁 references/

📄 providers.md

📄 SKILL.md