muapi-interior-design
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes several user-controlled input fields which are directly interpolated into prompts for image generation models.
- Ingestion points: User inputs
room_type,design_style,color_palette, andspecific_elementsdefined in the Inputs section ofSKILL.md. - Boundary markers: The instructions do not define any delimiters (like XML tags or triple quotes) or specific guardrail instructions to prevent the model from following commands hidden within the user's design descriptions.
- Capability inventory: The skill uses the
muapiCLI andcurlfor network requests to generate images and videos based on these prompts (found inSKILL.md). - Sanitization: There is no evidence of input validation, filtering, or escaping of the user-provided text before it is inserted into the API payloads.
- [COMMAND_EXECUTION]: The instructions for the executing agent in
SKILL.mdexplicitly direct the agent to run shell commands using themuapiCLI andcurl. While this is the intended operation of the skill to interface with theapi.muapi.aiservice, it involves executing external processes with parameters derived from user input.
Audit Metadata