muapi-selfie-with-celebrities
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interpolates user inputs into model prompts, creating an indirect injection surface. 1. Ingestion points:
movie_nameanduser_imageinSKILL.md. 2. Boundary markers: None present. 3. Capability inventory: UsesmuapiCLI andcurlfor network requests toapi.muapi.ai. 4. Sanitization: None present for user text inputs. - [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands using the
muapiCLI andcurl. It relies on the$MUAPI_API_KEYenvironment variable for authenticated access to the vendor's API.
Audit Metadata