muapi-music-video
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill orchestrates media generation by calling local CLI commands, specifically
muapi image generate,muapi audio create, andmuapi video from-image. It also utilizescurlas a fallback mechanism for direct API interaction. - [EXTERNAL_DOWNLOADS]: The skill interacts with the MuAPI backend at
api.muapi.aito submit generation requests and retrieve assets. These interactions involve passing a vendor-specific API key (MUAPI_API_KEY) to the authorized service domain. - [INDIRECT_PROMPT_INJECTION]: User-provided inputs such as
theme,music_style, andvisual_styleare interpolated into the prompts used for AI asset generation, creating a potential surface for indirect prompt injection where malicious input could influence the generation output. - Ingestion points: The
theme,music_style, andvisual_styleinput fields defined inSKILL.md. - Boundary markers: No specific delimiters or safety instructions are used when interpolating user input into the command-line arguments.
- Capability inventory: The skill possesses the capability to execute shell commands and perform network operations via
curland themuapiCLI. - Sanitization: The instructions do not specify any sanitization or validation logic for the user-provided text before it is passed to the generation tools.
Audit Metadata