muapi-platform

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The setup.sh and check-result.sh scripts are shell wrappers that execute the muapi command-line utility to perform authentication and result retrieval from the muapi.ai platform.
  • [INDIRECT_PROMPT_INJECTION]: The check-result.sh script accepts a --jq argument which is passed to the underlying muapi tool.
  • Ingestion points: User-supplied arguments in check-result.sh (--id, --jq).
  • Boundary markers: None implemented in the bash wrapper.
  • Capability inventory: Execution of the muapi binary via check-result.sh and setup.sh.
  • Sanitization: The script uses double-quoted array expansion "${ARGS[@]}" to prevent shell word-splitting, but rely on the muapi tool itself to sanitize the JQ expressions it receives.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 07:17 AM