muapi-product-ad-cinematic
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network operations using
curland themuapiCLI to communicate withapi.muapi.ai. These requests are used to send generation parameters and poll for results from the vendor's API. - [PROMPT_INJECTION]: The skill incorporates user-provided text from the
brand_briefinput directly into prompts for image and audio generation. This represents an indirect prompt injection surface where a malicious input could attempt to influence the output of the generative models. - Ingestion points:
brand_briefinput variable defined inSKILL.md. - Boundary markers: No delimiters or specific instructions to ignore embedded commands are present in the prompt templates.
- Capability inventory: The skill invokes
muapiCLI commands andcurlsubprocesses to perform media generation and file operations. - Sanitization: The input is interpolated into prompts without explicit validation or escaping of special characters.
Audit Metadata