muapi-platform
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The scripts
setup.shandcheck-result.shfunction as wrappers for an externalmuapicommand-line utility. They pass user-supplied arguments, including API keys and request IDs, to this tool to perform authentication and data retrieval from the muapi.ai platform. - [INDIRECT_PROMPT_INJECTION]: The
check-result.shscript facilitates the processing of remote generation results by passing a user-definedjqexpression to themuapitool. While this creates an ingestion point for external data, the risk is inherent to the tool's purpose and mitigated by standard shell quoting. - Ingestion points: Results fetched from the muapi.ai platform and the
--jqfilter argument incheck-result.sh. - Boundary markers: Absent; the script relies on the
muapiCLI tool's internal handling of arguments and data. - Capability inventory: The skill can execute the
muapicommand with various flags but does not perform direct network operations or file system writes itself. - Sanitization: Employs standard bash array and variable quoting (
"${ARGS[@]}") to prevent local command injection during argument passing.
Audit Metadata