muapi-product-video-ad-maker

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill takes user-provided data from the scene_description and product_image inputs and interpolates them directly into prompts used for image and video generation.
  • Ingestion points: scene_description and product_image inputs defined in SKILL.md.
  • Boundary markers: None present; inputs are directly placed within the prompt strings.
  • Capability inventory: The skill uses muapi CLI and curl to send these prompts to an external API.
  • Sanitization: No sanitization or validation of the user-provided text is performed before interpolation.
  • [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to interact with https://api.muapi.ai via curl for API endpoints not yet supported by the CLI.
  • [COMMAND_EXECUTION]: The skill executes muapi CLI commands (e.g., muapi image edit, muapi video from-image, muapi auth configure) to perform its primary functions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 05:11 PM