muapi-youtube-shorts

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a bash script (scripts/run-youtube-shorts.sh) to delegate tasks to an internal primitive (ai-clipping). It correctly uses set -euo pipefail and handles arguments safely without risky evaluation patterns like eval. The script invokes the muapi-cli tool to interact with the vendor's API.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with muapi.ai via a dedicated CLI tool. All remote operations (transcription, ranking, and cropping) occur on the vendor's servers. The URLs referenced in documentation and code belong to the skill author's infrastructure (muapi.ai) or trusted repositories.
  • [DATA_EXPOSURE]: The skill requires a MUAPI_API_KEY to function. It recommends using an environment variable, which is a standard and safe practice for secret management. It does not access sensitive local files or directories.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 11:15 PM