muapi-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform package management operations, specifically using
pip install --upgradeon a local workspace path to maintain themuapi-clitoolset. - [INDIRECT_PROMPT_INJECTION]: The skill exposes a surface for processing untrusted data by taking natural language descriptions to generate and discover workflows. While typical for AI-driven workflow tools, it presents an attack surface for embedded instructions in user prompts. \n
- Ingestion points: User-provided strings for the
--promptargument inscripts/generate-workflow.shand the--queryargument inscripts/discover-workflow.sh. \n - Boundary markers: None identified; user prompts are interpolated into command arguments. \n
- Capability inventory: The skill can create, edit, and execute multi-step AI generation workflows using the
muapicommand-line tool. \n - Sanitization: None detected in the provided scripts; the skill relies on the underlying CLI to process inputs.
Audit Metadata