muapi-multi-angle-reshoot
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interpolates the user-provided
subject_descriptiondirectly into prompts for image generation and editing tasks without using boundary markers or sanitization. This creates an attack surface where malicious input could influence the generated output or agent behavior. - Ingestion points: The
subject_descriptioninput field inSKILL.md. - Boundary markers: None are used to delimit the user input within the prompts.
- Capability inventory: The skill uses
muapiCLI commands andcurlfor network requests toapi.muapi.ai. - Sanitization: No input validation or filtering is performed on the description before it is processed.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
muapiCLI commands (muapi image generate,muapi image edit,muapi auth configure) andcurlcommands to interact with the external MuAPI service. These commands are necessary for the skill's primary functionality and utilize environment variables for authentication.
Audit Metadata