muapi-multi-angle-shots
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interpolates user-supplied text directly into instructions provided to downstream image generation models.
- Ingestion points: User inputs for
product_name,background_style,lighting, andcategorydefined inSKILL.md. - Boundary markers: Absent; user strings are concatenated directly into the tool prompts without specific delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill utilizes
muapiCLI tools andcurlto perform network-based image generation tasks. - Sanitization: No sanitization, validation, or escaping of the user-provided strings is implemented in the skill instructions.
- [COMMAND_EXECUTION]: The skill requires the executing agent to run shell commands to interact with the MuAPI platform.
- Evidence: The instructions specify the use of
muapi image generateandmuapi auth configurecommands. - [DATA_EXFILTRATION]: The skill performs network operations to the MuAPI service infrastructure.
- Evidence: The skill makes network requests to
api.muapi.aiusingcurland themuapiCLI tool to transmit generation parameters and retrieve results.
Audit Metadata