muapi-giant-product-showcase
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill integrates user-supplied text and external image resources into prompts for image and video generation models, creating a vulnerability surface.
- Ingestion points:
person_descriptionandproduct_imageinSKILL.md. - Boundary markers: There are no delimiters or instructions to prevent the agent from following commands that might be embedded in the inputs.
- Capability inventory: The skill calls the
muapiCLI andcurlfor processing images and videos. - Sanitization: No input cleaning or validation is performed prior to interpolation.
- [EXTERNAL_DOWNLOADS]: The skill connects to
api.muapi.aito send and receive media data. - [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands using the
muapiCLI andcurlutility, including handling API keys via environment variables.
Audit Metadata