muapi-product-showcase-video
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
muapiCLI tool andcurlto interact with remote image and video generation services. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes user-provided inputs that are directly embedded into model prompts.
- Ingestion points: Parameters such as
product_image,ingredients_description, andbrand_colorsare sourced from the user and incorporated into the workflow. - Boundary markers: The skill does not implement boundary markers or instructions to the model to ignore potential commands embedded in these user inputs.
- Capability inventory: The skill allows for command execution (
muapi) and network communication (curl) to theapi.muapi.aidomain. - Sanitization: No sanitization, escaping, or validation is performed on the user-supplied text or URLs before they are used in the generation prompts.
Audit Metadata