muapi-color-analysis-board

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill uses the MUAPI_API_KEY for authentication during interactions with the api.muapi.ai endpoint. This is a standard and necessary procedure for skills integrated with specialized API services.
  • [EXTERNAL_DOWNLOADS]: The skill references the muapi CLI and makes network calls to the api.muapi.ai domain. These resources are part of the developer's infrastructure and are required for the skill's image generation functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts a user-provided image URL (person_image) which is interpolated into a generation prompt.
  • Ingestion points: person_image parameter in SKILL.md.
  • Boundary markers: None present (direct interpolation).
  • Capability inventory: Network access via curl and the muapi CLI tool.
  • Sanitization: No specific sanitization logic is described for the input URL, though the risk is limited by the context of image-to-image synthesis.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 05:11 PM