The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to use the muapi CLI tool to perform image editing tasks. It also provides a fallback to curl for direct API interaction if CLI aliases are missing, which involves executing shell commands to transmit data and API keys.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied image URLs (person_image) to drive its core logic. The agent is instructed to analyze the image content to determine themes, poses, and captions.
Ingestion points: The person_image input field in SKILL.md allows users to provide external URLs.
Boundary markers: None are present to delimit the analysis of the external image content from the agent's core instructions.
Capability inventory: The skill utilizes muapi CLI execution and curl for network operations to send data to external endpoints.
Sanitization: There is no evidence of sanitization or validation of the content retrieved from the provided image URLs before processing.
[DATA_EXFILTRATION]: The skill performs network operations to api.muapi.ai to process images and requires the transmission of a MUAPI_API_KEY. While this is the intended functionality, it involves sending user-provided data to a third-party service.

muapi-chibi-collage-effect