muapi-interior-design
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill collects user inputs for room types, design styles, and specific elements, which are then embedded directly into prompts for image generation tools. The absence of boundary markers or input sanitization creates a surface where malicious user input could potentially influence the behavior of the downstream image generation models.
- Ingestion points: User-provided inputs defined in the
Inputssection ofSKILL.md. - Boundary markers: None observed in the prompt templates.
- Capability inventory: Shell command execution (
muapiCLI), network access viacurlto the Muapi API. - Sanitization: No sanitization or validation of the input strings is performed before interpolation.
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute several shell commands to interact with the Muapi service.
- Tools:
muapi image edit,muapi image generate,muapi auth configure, andmuapi predict wait. - Fallback Mechanism: Instructs the use of
curlto send POST requests tohttps://api.muapi.ai/api/v1/using the$MUAPI_API_KEYenvironment variable for authentication.
Audit Metadata