muapi-youtube-thumbnail
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
muapiCLI tool for image generation and task polling. This is a vendor-specific tool required for the skill's primary function. - [EXTERNAL_DOWNLOADS]: The skill describes using
curlto interact withapi.muapi.ai. This is the official endpoint for the service the skill is designed to interface with, and these operations are necessary for the thumbnail generation process. - [DATA_EXPOSURE]: The instructions describe the use of an environment variable
MUAPI_API_KEYand themuapi auth configurecommand. This represents standard practices for managing API credentials during runtime rather than hardcoding sensitive information. - [INDIRECT_PROMPT_INJECTION]: The skill incorporates user-provided inputs like
subject_descriptioninto the image generation prompt. While this presents a surface for potential prompt injection into the image model, the impact is limited to the specific task and does not involve high-privilege operations.
Audit Metadata