技能 routeros-qemu-chr

📦

routeros-qemu-chr

Name: routeros-qemu-chr
Author: tikoci

内容修订 r1 高风险 🌐 网络访问⚙️ 外部命令📁 文件系统访问

在 QEMU 中运行 RouterOS CHR

RouterOS CHR 实验室经常失败，因为固件、VirtIO、加速和端口转发会因架构而异。此技能为本地实验室和 CI 工作流提供经过测试的 QEMU 模式。

支持: Claude Codex Code(CC)

⚠️ 38 差

此技能属于一个技能包

一条命令安装完整技能包，获得任务所需的全部技能。

TIKOCI RouterOS · 10 技能安装完整技能包

安装前请停下并请求确认。

请审查安装计划，并在更改文件前获得用户明确同意。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "routeros-qemu-chr" from https://skillstore.io/skills/tikoci-routeros-qemu-chr.md and its manifest at https://skillstore.io/api/skills/tikoci-routeros-qemu-chr/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/tikoci-routeros-qemu-chr.md 已签名 manifest GET /api/skills/tikoci-routeros-qemu-chr/manifest 已签名 lockfile GET /api/skills/tikoci-routeros-qemu-chr/lockfile

测试它

正在使用“routeros-qemu-chr”。 I need an x86_64 CHR lab on Linux with REST access.

预期结果:

该技能会返回一个启动计划，使用 SeaBIOS、VirtIO 磁盘和网络、可用时使用 KVM，并进行 localhost REST 转发。

正在使用“routeros-qemu-chr”。 My aarch64 VM boots to a silent stall.

预期结果:

首先检查 UEFI pflash 大小和 CPU 型号的诊断结果。
提醒使用显式 VirtIO PCI 设备，而不是 aarch64 简写。
当硬件加速不可用时，提供 TCG 的回退计划。

正在使用“routeros-qemu-chr”。 I need CI to test RouterOS package behavior.

预期结果:

该技能概述镜像下载、磁盘转换、QEMU 启动、就绪检查、package 上传、重启处理和清理。

安全审计

高风险

v6 • 2026/7/7 打开版本化报告

No prompt injection, hidden exfiltration, or malicious intent was found. The skill is legitimate RouterOS CHR and QEMU guidance, but it includes privileged host changes, external downloads, VM process launch, local service exposure, and predictable temp paths. These risks should be documented and gated by user confirmation before execution.

已扫描文件

799

分析行数

复核项

已忽略误报

已确认安全问题 (4)

高

references/github-actions-ci.md:46

World-Writable KVM Device Permission

The CI pattern writes a udev rule that sets the KVM device mode to 0666. This broadens virtualization access to every local user on shared or self-hosted runners.

The exact rule sets MODE="0666" for the KVM device. The impact is clear in shared runner or multi-user host contexts.

中

references/github-actions-ci.md:162

Network reconnaissance

sshpass -p '' scp -P 9122 -o StrictHostKeyChecking=no "$pkg" admin@127.0.0.1:/

The package upload uses sshpass with an empty admin password and disables host key checking against localhost. This is acceptable only for disposable local CHR instances.

中

references/chr-licensing.md:70 references/github-actions-ci.md:162-166

Default Empty RouterOS Administrator Credentials

Several examples use the default admin account with an empty password over SSH or HTTP. This is suitable only for disposable local CHR instances.

The examples show admin: or sshpass with an empty password. The context is local CI, but copying the pattern to persistent labs would be unsafe.

中

references/github-actions-ci.md:204-205

Destructive Git Cleanup Commands in CI Example

The retry pattern resets tracked files and removes untracked files before rebasing. This can delete local work if reused outside a disposable CI worktree.

The commands are explicitly present in the CI retry pattern. The documented context is CI, but the destructive behavior is real if copied elsewhere.

能力复核项 (33)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高

references/github-actions-ci.md:34

sudo privilege escalation

sudo apt-get update

The CI example runs apt with sudo, which modifies the host runner package state. This is legitimate setup work but requires elevated privileges.

高

references/github-actions-ci.md:35

sudo privilege escalation

sudo apt-get install -y qemu-system-x86 qemu-utils

The CI example runs apt with sudo, which modifies the host runner package state. This is legitimate setup work but requires elevated privileges.

高

references/github-actions-ci.md:46

sudo privilege escalation

echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rule

The CI example uses sudo to alter udev/KVM handling on the host. This broadens virtualization device access and is security-sensitive.

高

references/github-actions-ci.md:47

sudo privilege escalation

sudo udevadm control --reload-rules

The CI example uses sudo to alter udev/KVM handling on the host. This broadens virtualization device access and is security-sensitive.

高

references/github-actions-ci.md:48

sudo privilege escalation

sudo udevadm trigger --name-match=kvm

The CI example uses sudo to alter udev/KVM handling on the host. This broadens virtualization device access and is security-sensitive.

高

SKILL.md:97

Process spawn

const proc = Bun.spawn([

The skill shows Bun.spawn launching qemu-system-x86_64 with VM devices and forwarded ports. This is intended functionality, but it executes a host binary and starts a VM process.

中

references/chr-licensing.md:70

Hardcoded URL

curl -u admin: http://<router-ip>/rest/system/license

The example uses cleartext HTTP Basic auth to query a RouterOS license endpoint. This can expose credentials if copied outside a trusted local lab.

中

references/github-actions-ci.md:224

Shell command substitution

kill $(cat /tmp/qemu.pid) 2>/dev/null || true

The cleanup command reads a PID from a predictable temp file and passes it to kill. A tampered PID file could terminate an unintended process on less isolated hosts.

中

references/github-actions-ci.md:103

nohup (background persistent process)

nohup qemu-system-x86_64 \

The workflow backgrounds QEMU with nohup, creating a long-lived VM process. If cleanup fails, the process can persist and keep forwarded ports open.

中

references/github-actions-ci.md:166

Hardcoded URL

curl -sf -u admin: -X POST http://127.0.0.1:9180/rest/system/reboot || true

The workflow sends an authenticated reboot request using the default admin account with no password. This is safe only when the forwarded REST service is local and ephemeral.

中

references/github-actions-ci.md:162

Hardcoded IP address

sshpass -p '' scp -P 9122 -o StrictHostKeyChecking=no "$pkg" admin@127.0.0.1:/

The package upload uses sshpass with an empty admin password and disables host key checking against localhost. This is acceptable only for disposable local CHR instances.

中

references/github-actions-ci.md:166

Hardcoded IP address

curl -sf -u admin: -X POST http://127.0.0.1:9180/rest/system/reboot || true

The workflow sends an authenticated reboot request using the default admin account with no password. This is safe only when the forwarded REST service is local and ephemeral.

中

references/github-actions-ci.md:110

Temp directory access

> /tmp/qemu.log 2>&1 &

The workflow stores QEMU logs and PID data in predictable /tmp paths. On shared hosts, predictable temp paths can enable clobbering or process-control mistakes.

中

references/github-actions-ci.md:111

Temp directory access

echo $! > /tmp/qemu.pid

The workflow stores QEMU logs and PID data in predictable /tmp paths. On shared hosts, predictable temp paths can enable clobbering or process-control mistakes.

中

references/github-actions-ci.md:223

Temp directory access

if [ -f /tmp/qemu.pid ]; then

The workflow stores QEMU logs and PID data in predictable /tmp paths. On shared hosts, predictable temp paths can enable clobbering or process-control mistakes.

中

references/github-actions-ci.md:224

Temp directory access

kill $(cat /tmp/qemu.pid) 2>/dev/null || true

The workflow stores QEMU logs and PID data in predictable /tmp paths. On shared hosts, predictable temp paths can enable clobbering or process-control mistakes.

中

references/known-issues.md:55

nohup (background persistent process)

When backgrounding QEMU (e.g., `nohup qemu-system-x86_64 ... &`), use `exec` in the shell wrapper to

The reference discusses backgrounding QEMU with nohup. The surrounding text explains safe PID handling, but the pattern can still leave orphaned VMs if copied incorrectly.

中

references/known-issues.md:59

nohup (background persistent process)

nohup sh -c "qemu-system-x86_64 ..." &

The reference discusses backgrounding QEMU with nohup. The surrounding text explains safe PID handling, but the pattern can still leave orphaned VMs if copied incorrectly.

中

references/known-issues.md:62

nohup (background persistent process)

nohup sh -c "exec qemu-system-x86_64 ..." &

The reference discusses backgrounding QEMU with nohup. The surrounding text explains safe PID handling, but the pattern can still leave orphaned VMs if copied incorrectly.

中

references/known-issues.md:72

Temp directory access

socat -,rawer UNIX-CONNECT:/tmp/serial.sock,retry=10,interval=1

The example uses predictable /tmp paths for sockets or firmware variable files. This is operationally useful but can collide across users or VM instances.

中

references/known-issues.md:81

Temp directory access

VARS_COPY="/tmp/qemu-${VM_NAME}-vars.fd"

The example uses predictable /tmp paths for sockets or firmware variable files. This is operationally useful but can collide across users or VM instances.

中

SKILL.md:104

Temp directory access

"-chardev", `socket,id=serial0,path=/tmp/chr-serial.sock,server=on,wait=off`,

The programmatic QEMU example creates monitor or serial sockets under predictable /tmp paths. Shared hosts should use private per-instance directories and permissions.

中

SKILL.md:106

Temp directory access

"-monitor", `unix:/tmp/chr-monitor.sock,server,nowait`,

The programmatic QEMU example creates monitor or serial sockets under predictable /tmp paths. Shared hosts should use private per-instance directories and permissions.

中

SKILL.md:146

Temp directory access

cp /path/to/edk2-arm-vars.fd /tmp/my-vars.fd

The UEFI example copies writable firmware variables into /tmp. Predictable firmware-variable paths can collide or be clobbered on shared systems.

中

SKILL.md:150

Temp directory access

-drive if=pflash,format=raw,unit=1,file=/tmp/my-vars.fd \

The UEFI example copies writable firmware variables into /tmp. Predictable firmware-variable paths can collide or be clobbered on shared systems.

低

references/github-actions-ci.md:71

Hardcoded URL

wget -q "https://download.mikrotik.com/routeros/${ROSVER}/chr-${ROSVER}.vdi.zip" \

The workflow downloads VM images or package bundles from external MikroTik endpoints. The domains are expected, but this remains a remote supply-chain dependency.

低

references/github-actions-ci.md:72

Hardcoded URL

|| wget -q "https://cdn.mikrotik.com/routeros/${ROSVER}/chr-${ROSVER}.vdi.zip"

The workflow downloads VM images or package bundles from external MikroTik endpoints. The domains are expected, but this remains a remote supply-chain dependency.

低

references/github-actions-ci.md:156

Hardcoded URL

wget -q "https://download.mikrotik.com/routeros/${ROSVER}/all_packages-x86-${ROSVER}.zip" \

The workflow downloads VM images or package bundles from external MikroTik endpoints. The domains are expected, but this remains a remote supply-chain dependency.

低

references/github-actions-ci.md:157

Hardcoded URL

|| wget -q "https://cdn.mikrotik.com/routeros/${ROSVER}/all_packages-x86-${ROSVER}.zip"

The workflow downloads VM images or package bundles from external MikroTik endpoints. The domains are expected, but this remains a remote supply-chain dependency.

低

SKILL.md:31

Fetch API call

const version = await fetch(

The download guidance contacts MikroTik services to resolve or fetch CHR images. The endpoints are expected, but the skill depends on external network content.

低

SKILL.md:32

Hardcoded URL

`https://upgrade.mikrotik.com/routeros/NEWESTa7.${channel}`

The download guidance contacts MikroTik services to resolve or fetch CHR images. The endpoints are expected, but the skill depends on external network content.

低

SKILL.md:36

Hardcoded URL

const url = `https://download.mikrotik.com/routeros/${version}/chr-${version}.img.zip`;

The download guidance contacts MikroTik services to resolve or fetch CHR images. The endpoints are expected, but the skill depends on external network content.

低

SKILL.md:38

Hardcoded URL

const armUrl = `https://download.mikrotik.com/routeros/${version}/chr-${version}-arm64.img.zip`;

The download guidance contacts MikroTik services to resolve or fetch CHR images. The endpoints are expected, but the skill depends on external network content.

风险因素

🌐 网络访问 (20)

⚙️ 外部命令 (92)

📁 文件系统访问 (30)

检测到的模式

Network reconnaissance

审计者: codex 查看审计历史 →

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/tikoci-routeros-qemu-chr/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/tikoci-routeros-qemu-chr/security.svg)](https://skillstore.io/skills/tikoci-routeros-qemu-chr?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/tikoci-routeros-qemu-chr?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tikoci-routeros-qemu-chr/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/tikoci-routeros-qemu-chr.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

tikoci. (2026). routeros-qemu-chr security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/tikoci-routeros-qemu-chr/audits/6

BibTeX 引用

@techreport{tikoci-tikoci-routeros-qemu-chr-2026,
  author = {tikoci},
  title = {routeros-qemu-chr security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/tikoci-routeros-qemu-chr/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "routeros-qemu-chr security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "tikoci"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/tikoci-routeros-qemu-chr/audits/6"
identifiers:
  - type: other
    value: "skillstore:tikoci-routeros-qemu-chr:audit:6"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

构建一次性 RouterOS 实验室

创建本地 CHR VM，用于 API 测试、数据包调试或无需硬件的培训。

添加 RouterOS 集成测试

在 GitHub Actions 中运行 CHR，以验证 REST、packages 和生成的 schemas。

诊断 CHR 启动问题

当 VM 卡住或超时时，比较固件、CPU、加速和 VirtIO 选择。

试试这些提示

规划 CHR 实验室

Plan a RouterOS CHR QEMU lab on my host. Ask for my host OS and CPU architecture if needed, then recommend the image, boot method, acceleration, RAM, disk, and port forwards.

调试启动失败

Diagnose this CHR boot failure: [symptoms]. Compare firmware, machine type, disk interface, CPU model, and VirtIO transport. Give a prioritized fix list.

创建 CI 工作流

Design a GitHub Actions workflow for a selected RouterOS CHR version. Include image download, disk conversion, QEMU startup, REST readiness checks, optional package upload, reboot handling, and safe cleanup.

设计多架构矩阵

Build a multi-architecture CHR test strategy for x86_64 and aarch64 hosts. Include acceleration fallback rules, unsupported combinations, boot timing expectations, and skip logic.