muapi-youtube-thumbnail

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use the muapi CLI tool for image generation and task polling. This is a vendor-specific tool required for the skill's primary function.
  • [EXTERNAL_DOWNLOADS]: The skill describes using curl to interact with api.muapi.ai. This is the official endpoint for the service the skill is designed to interface with, and these operations are necessary for the thumbnail generation process.
  • [DATA_EXPOSURE]: The instructions describe the use of an environment variable MUAPI_API_KEY and the muapi auth configure command. This represents standard practices for managing API credentials during runtime rather than hardcoding sensitive information.
  • [INDIRECT_PROMPT_INJECTION]: The skill incorporates user-provided inputs like subject_description into the image generation prompt. While this presents a surface for potential prompt injection into the image model, the impact is limited to the specific task and does not involve high-privilege operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 11:15 PM