muapi-music-video

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill orchestrates media generation by calling local CLI commands, specifically muapi image generate, muapi audio create, and muapi video from-image. It also utilizes curl as a fallback mechanism for direct API interaction.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with the MuAPI backend at api.muapi.ai to submit generation requests and retrieve assets. These interactions involve passing a vendor-specific API key (MUAPI_API_KEY) to the authorized service domain.
  • [INDIRECT_PROMPT_INJECTION]: User-provided inputs such as theme, music_style, and visual_style are interpolated into the prompts used for AI asset generation, creating a potential surface for indirect prompt injection where malicious input could influence the generation output.
  • Ingestion points: The theme, music_style, and visual_style input fields defined in SKILL.md.
  • Boundary markers: No specific delimiters or safety instructions are used when interpolating user input into the command-line arguments.
  • Capability inventory: The skill possesses the capability to execute shell commands and perform network operations via curl and the muapi CLI.
  • Sanitization: The instructions do not specify any sanitization or validation logic for the user-provided text before it is passed to the generation tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 07:17 AM