muapi-seedance-2
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash script (
scripts/generate-seedance.sh) to interact with an external API. This script executes standard tools likecurl,jq, andpython3for network requests, JSON parsing, and string encoding. These are routine operations for an API wrapper skill. - [EXTERNAL_DOWNLOADS]: The skill downloads generated video/image content from
api.muapi.aiand potentially user-provided URLs invideo-editandwatermark-removemodes. These downloads are directed to a localmedia_outputsdirectory and are part of the intended functionality. - [DATA_EXFILTRATION]: The skill sends user-provided prompts, images, videos, and audio files to
api.muapi.aito perform AI generation tasks. This is the core purpose of the skill and follows standard API interaction patterns. The script requires anMUAPI_KEYfor authentication, which is expected to be provided by the user via environment variables. - [SAFE]: No obfuscation, persistence mechanisms, privilege escalation, or malicious prompt injection patterns were detected. The script handles local file uploads securely by sending them to a dedicated upload endpoint before referencing them in generation tasks.
Audit Metadata