muapi-one-shot-video

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input via the scene and style parameters and interpolates them directly into a prompt template for the video generation model.
  • Ingestion points: scene and style inputs in SKILL.md.
  • Boundary markers: None present; inputs are placed directly into the prompt string.
  • Capability inventory: Executes muapi CLI commands and curl network requests to external APIs.
  • Sanitization: No escaping or validation is performed on the user-provided text before interpolation.
  • [COMMAND_EXECUTION]: The skill uses the muapi CLI and curl to interact with the api.muapi.ai service. This involves accessing the MUAPI_API_KEY environment variable and performing network operations to the vendor's API endpoint.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 05:11 PM