Mulerouter

Generates images and videos using MuleRouter or MuleRun multimodal APIs. Text-to-Image, Image-to-Image, Text-to-Video, Image-to-Video, video editing (VACE, keyframe interpolation). Use when the user wants to generate, edit, or transform images and videos using AI models like Wan2.6, Veo3, Nano Banana Pro, Sora2, Midjourney.

This skill's code appears to implement a legitimate MuleRouter/MuleRun client for generating images/videos, but there are a few red flags you should consider before installing or running it: - Metadata mismatch: The skill metadata claims no required env vars, but the code and SKILL.md require MULEROUTER_API_KEY and either MULEROUTER_BASE_URL or MULEROUTER_SITE. Expect to provide an API key. - .env loading risk: The code will load a .env from the current working directory. Don't run these scripts from a directory that contains other secrets or .env files you don't want uploaded or printed. Prefer running in an isolated/sandboxed directory. - Local file upload: The tool prefers local file paths and will convert local images/videos to base64 and send them to the remote API. Only use files you are comfortable sending to the remote service. - No homepage / unknown source: There is no source/homepage or maintainer metadata. If possible, obtain a trusted upstream URL or verify the repository origin and maintainers before using API keys with this skill. - Run in a sandbox first: If you must try it, run it in a controlled environment (isolated container or VM) with a throwaway API key and minimal local files to confirm behavior. If you want to proceed safely, ask the publisher for a homepage or source repo, ensure the API endpoint is the official MuleRouter/MuleRun endpoint you expect, and avoid running the skill from directories that contain unrelated .env files or secrets.

Type: OpenClaw Skill Name: mulerouter-skills Version: 0.1.0 The skill is designed to interact with MuleRouter/MuleRun multimodal APIs for image and video generation. It reads API configuration from environment variables (`MULEROUTER_API_KEY`, `MULEROUTER_BASE_URL`, `MULEROUTER_SITE`) or a `.env` file, and makes network requests to the specified API endpoints (api.mulerouter.ai or api.mulerun.com). The `core/image.py` module includes functionality to read local image file paths and convert them to base64 for API submission, which is explicitly documented in `SKILL.md` as a feature. There is no evidence of intentional harmful behavior such as exfiltrating sensitive data to unauthorized endpoints, establishing persistence, or malicious prompt injection against the agent. All observed behaviors are aligned with the stated purpose of interacting with the multimodal APIs.