muapi-platform
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
setup.shandcheck-result.shscripts are shell wrappers that execute themuapicommand-line utility to perform authentication and result retrieval from the muapi.ai platform. - [INDIRECT_PROMPT_INJECTION]: The
check-result.shscript accepts a--jqargument which is passed to the underlyingmuapitool. - Ingestion points: User-supplied arguments in
check-result.sh(--id, --jq). - Boundary markers: None implemented in the bash wrapper.
- Capability inventory: Execution of the
muapibinary viacheck-result.shandsetup.sh. - Sanitization: The script uses double-quoted array expansion
"${ARGS[@]}"to prevent shell word-splitting, but rely on themuapitool itself to sanitize the JQ expressions it receives.
Audit Metadata