muapi-rednote-cover
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions in
SKILL.mddirect the agent to execute shell commands using themuapiCLI tool (e.g.,muapi auth configure,muapi image generate) andcurlto interact with the service endpoint. - [EXTERNAL_DOWNLOADS]: The skill interacts with the external domain
api.muapi.aiand requires themuapiCLI utility to be present in the environment to perform image generation and editing tasks. - [INDIRECT_PROMPT_INJECTION]: The skill lacks sanitization for user-controlled inputs interpolated into image generation prompts.
- Ingestion points: Untrusted data enters via the
topic,style, andtext_overlayinput variables inSKILL.md. - Boundary markers: No delimiters or specific instructions are used to prevent the agent from misinterpreting user input as instructions.
- Capability inventory: The skill has the capability to execute CLI commands and perform network operations via
curlas defined inSKILL.md. - Sanitization: No escaping or validation is performed on the user inputs before they are included in the prompt strings.
Audit Metadata