📦

toolrouter

Name: toolrouter
Author: humanleap

Ревизия содержимого r1 Безопасно ⚙️ Внешние команды🌐 Доступ к сети

Discover and Run ToolRouter Operations

External tasks require finding compatible tools, checking access, and tracking results. This skill guides those steps through one connected ToolRouter MCP server.

Поддерживает: Claude Codex Code(CC)

📊 74 Адекватно

Maintain this Skill? Claim it 📊 74 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "toolrouter" from https://skillstore.io/skills/humanleap-toolrouter.md and its manifest at https://skillstore.io/api/skills/humanleap-toolrouter/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/humanleap-toolrouter.md Подписанный manifest GET /api/skills/humanleap-toolrouter/manifest Подписанный lockfile GET /api/skills/humanleap-toolrouter/lockfile

Протестировать

Использование «toolrouter». Discover search tools without spending credits.

Ожидаемый результат:

Operation review: available schemas, account requirements, and prices are summarized before execution.
Execution status: no paid operation requested.

Использование «toolrouter». Generate an image within the approved budget.

Ожидаемый результат:

A completed result includes the asset link and verified job status.
A pending result reports the outstanding job, rather than claiming the image is ready.

Использование «toolrouter». Retrieve economic data for a selected country.

Ожидаемый результат:

The result identifies the statistical source, observation period, units, and country.
Coverage gaps and provider limitations remain visible alongside the retrieved values.

Аудит безопасности

Безопасно

v1 • 03.10.2026 Открыть версионный отчет

One finding confirms supply-chain exposure from the unpinned remote installation command. The other eighteen findings are Markdown identifiers, legitimate service links, or account authorization checks, not shell execution or system reconnaissance. No evidence found of prompt injection, credential exfiltration, or malicious intent in the reviewed files; the hosted service was not assessed.

Просканировано файлов

133

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Пункты проверки возможностей (1)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Средний

SKILL.md:13

Ruby/shell backtick execution

Install this skill with `pnpm dlx skills add Humanleap/agent-skills --skill toolrouter`. Connect the

The documented pnpm dlx command downloads and executes an unpinned installer, and the skill repository reference is also unpinned. This creates supply-chain exposure, although the backticks themselves are Markdown, not Ruby execution.

Факторы риска

⚙️ Внешние команды (12)

SKILL.md:13 SKILL.md:24 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:31 SKILL.md:38 SKILL.md:39 SKILL.md:40 SKILL.md:41 SKILL.md:43 SKILL.md:51

🌐 Доступ к сети (5)

SKILL.md:4 SKILL.md:13 SKILL.md:57 SKILL.md:58 SKILL.md:59

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/humanleap-toolrouter/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/humanleap-toolrouter/security.svg)](https://skillstore.io/skills/humanleap-toolrouter?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/humanleap-toolrouter?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/humanleap-toolrouter/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/humanleap-toolrouter.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

humanleap. (2026). toolrouter security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/humanleap-toolrouter/audits/1

Цитата BibTeX

@techreport{humanleap-humanleap-toolrouter-2026,
  author = {humanleap},
  title = {toolrouter security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/humanleap-toolrouter/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "toolrouter security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "humanleap"
date-released: "2026-10-03"
url: "https://skillstore.io/skills/humanleap-toolrouter/audits/1"
identifiers:
  - type: other
    value: "skillstore:humanleap-toolrouter:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Compare Search and SEO Evidence

Discover search and keyword operations, gather source links, and retain market, date range, and measurement limitations.

Produce Approved Media Assets

Find an available media operation, check its price, and track the job until completed asset links are available.

Retrieve Company and Economic Data

Select registry or statistical operations and report results with source dates, units, geography, and access limitations.

Попробуйте эти промпты

Find an Available Search Tool

Use my connected ToolRouter server to discover web search operations. Report available schemas and access requirements without executing paid operations.

Research Keyword Demand

Research keyword demand for electric bicycles in the United Kingdom through ToolRouter. Check schemas and prices, request spending approval, and retain provider limitations.

Generate and Verify an Image

Generate one square product image through an available ToolRouter operation, within my approved $2 budget. Verify job completion and return the asset link.

Publish an Authorized Social Post

Publish my approved launch text to the connected X account I specified. Verify its identity and operation schema; check uncertain status before retrying.

Лучшие практики

Inspect the live operation schema, account access, and price before execution.
Keep credentials in the client credential store and confirm authority for account changes, publishing, and spending.
Track asynchronous jobs and verify uncertain writes before retrying or reporting success.

Избегать

Inventing operation names or treating provider listings as proof of account access.
Changing providers, connecting accounts, or spending credits without task authority.
Repeating uncertain writes or reporting queued jobs as completed results.

Часто задаваемые вопросы

Which assistants can use this skill?

The skill targets Claude, Codex, and Claude Code. The client must support the connected remote MCP server and its authentication flow.

Does the skill work without ToolRouter?

No. It guides ToolRouter operations and requires a connected server exposing the needed tools.

Are all listed providers available to my account?

No. Provider references describe integrations, while live schemas and your client profile determine available operations and account requirements.

Can operations cost money?

Yes. Inspect operation prices and available credits, then obtain task-specific spending authority before paid execution.

Can it publish to X or LinkedIn?

It guides supported publishing operations when available. Confirm the connected account, authorized content, and live schema before posting.

How should credentials and installation be handled?

Keep tokens in the client credential store. Review downloaded installation code and prefer pinned installer versions and immutable skill revisions.

Сведения для разработчиков

Автор

humanleap

Лицензия

MIT

Ревизия Skillstore

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/humanleap/agent-skills/tree/1eaefe1e9bc4f006ccce55793eb98055619e9a5d/skills/toolrouter

Ссылка

f34d6380f82ea59b1965530a3bc0b1bc54c25f91

Актуальность поддержки

03.10.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📁 references/

📄 providers.md

📄 SKILL.md