π¦
routemux-setup
78Connect Your Tools to RouteMux
AI client setup often fails because tools expect different base URL and protocol formats. This skill selects the correct RouteMux endpoint and verifies access.
DevOps & Infrastructure View
Skills routemux-images
π¦
routemux-images
Content revision r1 High Risk βοΈ External commandsπ Network accessπ Filesystem accessπ Env variables
Generate and Edit Images with RouteMux
Coding agents can lose built-in image tools when routed through a custom API gateway. This skill uses RouteMux endpoints to generate or edit images.
Supports: Claude Codex Code(CC)
Stop for confirmation before installing.
Review the plan and obtain explicit user consent before changing files.
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "routemux-images" from https://skillstore.io/skills/rootfily-ai-routemux-images.md and its manifest at https://skillstore.io/api/skills/rootfily-ai-routemux-images/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "routemux-images". Create a square app icon showing a white compass on a green field.
Expected outcome:
Saved the generated icon to the requested project path. The response used the selected RouteMux image model.
Using "routemux-images". Edit the supplied office photo so the wall is light gray while preserving the furniture.
Expected outcome:
Saved the edited photo to the requested path and reported the model that completed the edit.
Using "routemux-images". Generate a wide editorial illustration and verify its dimensions.
Expected outcome:
- Saved one generated illustration to the requested path.
- Reported the requested aspect ratio, actual file dimensions, and responding model.
Security Audit
High Riskv1 β’ 9/15/2026 Open versioned report
The skill intentionally uses curl, RouteMux network endpoints, a dedicated API key, and user-selected files. Most backtick alerts are Markdown false positives, but unsafe shell interpolation and plaintext shell-profile storage create credible risks.
1
Files scanned
103
Lines analyzed
9
Review items
0
False positives ignored
Confirmed security concerns (2)
High
Shell Injection Through Prompt and Path Placeholders
User-derived prompt and path placeholders appear directly in shell command templates without structured argument handling.
The prompt is placed inside shell quotes and the image path is unquoted, allowing metacharacters to alter command interpretation.
Medium
Unvalidated Response URL Download
The workflow instructs the agent to download any URL returned by the service without scheme, host, size, or content validation.
The download instruction is explicit, while safeguards for service-controlled URLs are absent.
Capability review items (9)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Hidden file in home directory
Add that line to ~/.zshrc (or ~/.bashrc) so new terminals have it too.
The instructions recommend persisting the plaintext API key in a shell profile under the user's home directory.
High
Hidden file access
Add that line to ~/.zshrc (or ~/.bashrc) so new terminals have it too.
The setup guidance directs users to modify hidden shell configuration files with a persistent plaintext secret.
Medium
Ruby/shell backtick execution
```bash
The fenced block invokes curl and sends an authorization header to RouteMux to retrieve the model catalogue.
Medium
Ruby/shell backtick execution
```bash
The fenced block instructs the agent to execute a local image-generation shell script with user-derived arguments.
Medium
Ruby/shell backtick execution
```bash
The fenced block invokes curl to submit image prompts and credentials to the RouteMux generation endpoint.
Medium
Ruby/shell backtick execution
```bash
The fenced block invokes curl to upload an image and API credential to the RouteMux editing endpoint.
Low
Hardcoded URL
curl -s "https://api.routemux.com/v1/models?capability=image_generation" \
The skill intentionally queries the RouteMux API and transmits its API credential over the network.
Low
Hardcoded URL
curl -s https://api.routemux.com/v1/images/generations \
The skill intentionally sends the user's prompt and API credential to the RouteMux generation endpoint.
Low
Hardcoded URL
curl -s https://api.routemux.com/v1/images/edits \
The skill intentionally uploads an input image, edit prompt, and API credential to RouteMux.
Risk Factors
βοΈ External commands (26)
SKILL.md:11 SKILL.md:12 SKILL.md:19 SKILL.md:22-28 SKILL.md:28-33 SKILL.md:33-36 SKILL.md:36-39 SKILL.md:39-43 SKILL.md:43-45 SKILL.md:45-47 SKILL.md:47-52 SKILL.md:52-53 SKILL.md:53-54 SKILL.md:54-62 SKILL.md:62-64 SKILL.md:64-70 SKILL.md:70-74 SKILL.md:74-83 SKILL.md:83-84 SKILL.md:84-85 SKILL.md:85-86 SKILL.md:86-87 SKILL.md:87-88 SKILL.md:88-90 SKILL.md:90-94 SKILL.md:94-97
π Network access (5)
π Filesystem access (2)
π Env variables (7)
Audited by: codex
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/rootfily-ai-routemux-images?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/rootfily-ai-routemux-images?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/rootfily-ai-routemux-images/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/rootfily-ai-routemux-images.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA Β· BibTeX Β· CFF)
APA citation
rootfily-ai. (2026). routemux-images security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1BibTeX citation
@techreport{rootfily-ai-rootfily-ai-routemux-images-2026,
author = {rootfily-ai},
title = {routemux-images security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "routemux-images security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "rootfily-ai"
date-released: "2026-09-15"
url: "https://skillstore.io/skills/rootfily-ai-routemux-images/audits/1"
identifiers:
- type: other
value: "skillstore:rootfily-ai-routemux-images:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: Medium 55
Architecture
85
Maintainability
85
Content
65
Community
91
Spec Compliance
What You Can Build
Create Product Visuals
Generate a focused product mockup and save it inside the active project.
Produce Application Assets
Create icons, illustrations, or backgrounds when built-in image tools are unavailable.
Revise Existing Artwork
Upload an image and request a targeted visual change through RouteMux.
Try These Prompts
Generate a Simple Image
Generate an image of [subject] in [style]. Save it as [output path].
Set Composition and Ratio
Create [subject] with [composition], [lighting], and [color palette]. Use a [aspect ratio] format and save it to [output path].
Edit an Existing Image
Edit [input image path] to [requested change]. Preserve [elements to keep] and save the result as [output path].
Choose and Verify a Model
Query current RouteMux image models, select one suitable for [requirements], create [image brief], verify the returned dimensions, and report the responding model.
Best Practices
- Provide a precise subject, composition, style, and aspect ratio.
- Choose an output path inside the active working directory.
- Review the reported model and actual dimensions before using the asset.
Avoid
- Do not place real API keys in prompts, files, logs, or replies.
- Do not request many variants in one call to reduce network usage.
- Do not assume a model slug or exact pixel size remains stable.
Frequently Asked Questions
What credential does this skill require?
It requires ROUTEMUX_API_KEY in the environment and should not search other credential stores.
Can it edit an existing image?
Yes. It uploads one input image with a text instruction to the RouteMux editing endpoint.
How does it choose an image model?
It queries the live RouteMux catalogue and selects a model that supports image generation.
Can it guarantee exact dimensions?
No. The requested size reliably guides aspect ratio, but upstream models may return different pixel dimensions.
Where does it save generated images?
It saves each image to the user-selected artifact path, normally inside the active working directory.
What happens when RouteMux returns an error?
It interprets documented errors, limits retries for temporary failures, and reports the request identifier when available.
Developer Details
Author
rootfily-aiLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
f6aa6f4e154bf3a8f90ac2069cbe691b8c5a5980
Maintenance freshness
9/15/2026
Usage
0 downloads Β· 0 views
File structure
π SKILL.md
More from rootfily-ai
View allπ¦
routemux-models
78Check RouteMux Models and Capabilities
Choosing a model without current availability, pricing, or capability data can cause failed requests and poor tradeoffs. This skill queries the live RouteMux catalogue for the models your key can call.
Research & Learning View
π¦
routemux-video
38Generate Videos with RouteMux
Video generation APIs require model selection, asynchronous polling, and careful download handling. This skill guides RouteMux submissions and returns completed video files with status details.
Design & Creative View
Related Skills
View allπ¦
imagegen
82Create and Edit Project Images
by openai
Producing consistent raster assets requires precise prompts, careful edits, and reliable output handling. This skill structures requests, creates or edits visuals, validates results, and saves project-ready files.
Design & Creative View
π¦
gpt-image-2
78Generate GPT Image 2 Assets on RunComfy
by runcomfy-com
Teams need image prompts and edits that preserve text, layout, and brand details. This skill guides Claude, Codex, and Claude Code to use RunComfy's GPT Image 2 endpoints with clear size, edit, and privacy rules.
Design & Creative View
π¦
nano-banana-2
78Generate and Edit Images with Nano Banana 2
by inferen-sh
Creating polished images often requires separate tools for generation, editing, and current information. This skill provides one inference.sh workflow for all three tasks.
Design & Creative View
π¦
native-transparent-imagegen
86Generate Native-Alpha Transparent Images
by zseven-w
Image generators can return opaque files or painted checkerboards when transparency is required. This skill generates native-alpha assets and validates every untouched output.
Design & Creative View
π¦
generating-storyboards
82Create Consistent Video Storyboards
by supercmohq
Video concepts can lose continuity when clips are planned separately. This skill creates sequential storyboard sheets that preserve characters, products, settings, and visual states.
Design & Creative View
π¦
generating-ai-actors
82Create Reusable Photorealistic AI Actors
by supercmohq
Campaign teams need consistent fictional talent without supplying a person photograph. This skill creates one detailed adult identity that can guide later image and video generation.
Design & Creative View