muapi-product-ad-cinematic

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the muapi CLI tool for authentication, image generation, upscaling, and video creation.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with the service at api.muapi.ai to process media generation tasks and retrieve assets.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user that is interpolated into model prompts.
  • Ingestion points: brand_brief and product_image inputs defined in SKILL.md.
  • Boundary markers: The skill does not define delimiters or instructions to ignore embedded commands in user input.
  • Capability inventory: The skill executes shell commands via the muapi CLI and curl as described in SKILL.md.
  • Sanitization: No sanitization of user-provided text or URLs is performed before interpolation.
  • [DYNAMIC_EXECUTION]: The skill constructs curl commands at runtime to interact with API endpoints using environment variables and user inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 07:18 AM