muapi-one-shot-video
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because user-provided inputs are used to construct prompts for the video generation models.\n
- Ingestion points: The
sceneandstyleinput fields in SKILL.md.\n - Boundary markers: No delimiters or protective instructions are used to separate user data from the core prompt instructions.\n
- Capability inventory: The skill executes CLI tools and makes network requests via
curl.\n - Sanitization: No input filtering or escaping is implemented to mitigate malicious instructions within the
sceneorstyletext.\n- [COMMAND_EXECUTION]: The skill directs the agent to executemuapiCLI commands and shell commands likecurlfor service interactions.\n- [DATA_EXFILTRATION]: The skill performs network requests toapi.muapi.aito transmit generation parameters and retrieve results, which involves the use of theMUAPI_API_KEYfor authentication.
Audit Metadata