muapi-logo-generator

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests several user-defined parameters that are interpolated directly into model prompts and shell command arguments.
  • Ingestion points: brand_name, style, industry, colors, and background input fields in SKILL.md.
  • Boundary markers: No clear delimitation or validation of user-provided strings is specified.
  • Capability inventory: The skill triggers shell commands via the muapi CLI and makes external network requests using curl.
  • Sanitization: There is no evidence of input escaping or filtering for malicious characters.
  • [COMMAND_EXECUTION]: The skill utilizes the muapi CLI for core image generation functionality and authentication setup.
  • [DATA_EXFILTRATION]: The skill performs network operations targeting api.muapi.ai to transmit logo parameters and retrieve generated images. This domain is associated with the skill's official service provider.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 07:18 AM