muapi-award-ceremony-video
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
muapiCLI tool andcurlto interact with the service atapi.muapi.ai. This execution is restricted to the primary function of submitting video generation tasks.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data which is interpolated into prompts for video generation, presenting a potential injection surface.\n - Ingestion points: User inputs for
winner_name,winner_image, andhost_imagedefined inSKILL.md.\n - Boundary markers: Not present; the user name is directly inserted into the prompt string.\n
- Capability inventory: Interaction with external APIs via
muapiCLI andcurlcommands.\n - Sanitization: No sanitization or validation of the user-provided text is performed before prompt construction.
Audit Metadata