muapi-product-ad-cinematic
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
muapiCLI tool for authentication, image generation, upscaling, and video creation. - [EXTERNAL_DOWNLOADS]: The skill communicates with the service at
api.muapi.aito process media generation tasks and retrieve assets. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user that is interpolated into model prompts.
- Ingestion points:
brand_briefandproduct_imageinputs defined inSKILL.md. - Boundary markers: The skill does not define delimiters or instructions to ignore embedded commands in user input.
- Capability inventory: The skill executes shell commands via the
muapiCLI andcurlas described inSKILL.md. - Sanitization: No sanitization of user-provided text or URLs is performed before interpolation.
- [DYNAMIC_EXECUTION]: The skill constructs
curlcommands at runtime to interact with API endpoints using environment variables and user inputs.
Audit Metadata