muapi-floor-plan-rendering

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill interpolates user-provided text (floor_plan_description) directly into prompts for image generation and editing tasks.
  • Ingestion points: The floor_plan_description input variable in SKILL.md is used to build prompts for Phase A and Phase B.
  • Boundary markers: Absent. User input is directly appended to the prompt strings without delimiters or instructions to ignore embedded commands.
  • Capability inventory: The skill uses muapi image generate, muapi image edit, and curl to interact with the MuAPI platform.
  • Sanitization: Absent. There is no evidence of filtering or escaping for the user-provided description before it is sent to the image models.
  • [COMMAND_EXECUTION]: The skill uses the muapi CLI and curl to perform its primary functions.
  • Evidence: Instructions include muapi image generate, muapi image edit, muapi auth configure, and curl calls to https://api.muapi.ai for API interaction.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 07:17 AM