muapi-drone-style-video
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates user-provided text from the
location_or_subjectandstylefields directly into the prompts used for video generation models. - Ingestion points: Inputs defined in
SKILL.mdsuch aslocation_or_subjectandstyle. - Boundary markers: Absent; the instructions do not include delimiters or specific commands to ignore potential instructions embedded within the user's location or style descriptions.
- Capability inventory: The skill possesses network access capabilities through the
muapiCLI andcurlcommands to theapi.muapi.aiendpoint. - Sanitization: No input validation, escaping, or filtering is applied to user inputs before they are interpolated into the final prompt strings.
- [COMMAND_EXECUTION]: The skill relies on shell command execution for its core operations, involving both a dedicated CLI and generic networking tools.
- Evidence: The orchestrating instructions command the agent to run
muapi video generate,muapi predict wait, andmuapi auth configure. - Evidence: The skill provides a fallback mechanism using
curlto interact with thehttps://api.muapi.ai/api/v1/endpoint, passing theMUAPI_API_KEYenvironment variable in the headers.
Audit Metadata