muapi-logo-generator
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests several user-defined parameters that are interpolated directly into model prompts and shell command arguments.
- Ingestion points:
brand_name,style,industry,colors, andbackgroundinput fields inSKILL.md. - Boundary markers: No clear delimitation or validation of user-provided strings is specified.
- Capability inventory: The skill triggers shell commands via the
muapiCLI and makes external network requests usingcurl. - Sanitization: There is no evidence of input escaping or filtering for malicious characters.
- [COMMAND_EXECUTION]: The skill utilizes the
muapiCLI for core image generation functionality and authentication setup. - [DATA_EXFILTRATION]: The skill performs network operations targeting
api.muapi.aito transmit logo parameters and retrieve generated images. This domain is associated with the skill's official service provider.
Audit Metadata