Mulerouter

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a purpose-aligned MuleRouter/MuleRun media-generation skill, but it requires an API key, network access, dependency installation, and may upload local media to the configured API.

Before installing, confirm you trust the MuleRouter/MuleRun endpoint you configure, keep the API key private, review dependencies before running uv sync, and only submit images or videos you are comfortable uploading to the service.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your MuleRouter/MuleRun API key will be used for requests made by this skill.

Why it was flagged

The skill authenticates to the configured API using a bearer token loaded from configuration. This is expected for MuleRouter/MuleRun access, but it is a credential use users should be aware of.

Skill content
"Authorization": f"Bearer {self.config.api_key}"
Recommendation

Use a dedicated API key if possible, keep it out of shared project files, and only configure trusted API endpoints.

What this means

Images or videos you provide as local paths may be uploaded to the configured MuleRouter/MuleRun-compatible API.

Why it was flagged

Local image inputs are intentionally converted and transmitted to the external generation API. This is purpose-aligned for image/video generation, but it can include private media.

Skill content
The skill automatically converts local file paths to base64 before sending to the API.
Recommendation

Only provide media you are comfortable sending to that service, and verify the configured base URL before use.

What this means

Installing dependencies may fetch third-party packages into your environment.

Why it was flagged

The skill requires a user-directed Python dependency installation step even though the registry lists no install spec. This is common for Python CLI tooling but should be reviewed before running.

Skill content
Run `uv sync` to install dependencies.
Recommendation

Review the project dependency file and run installation only in an environment where you are comfortable adding those packages.