muapi-3d-logo-animation
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill takes user input for the logo material style and embeds it into prompts for image and video generation tools without validation.
- Ingestion points: Inputs
logo_imageandmaterial_styleare defined inSKILL.mdand used in tool calls. - Boundary markers: No delimiters or safety instructions are used to separate user input from the rest of the generation prompt.
- Capability inventory: The skill uses the
muapiCLI and thecurlcommand to communicate with external APIs. - Sanitization: There is no evidence of filtering or escaping user input before it is interpolated into task instructions.
- [DATA_EXFILTRATION]: The skill performs network operations to
api.muapi.aiusing theMUAPI_API_KEYenvironment variable for authentication. This represents standard communication with the provider's API.
Audit Metadata