muapi-ugc-ads-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute commands using the
muapiCLI tool, specifically for authentication (muapi auth configure), image editing (muapi image edit), and monitoring predictions (muapi predict wait). - [EXTERNAL_DOWNLOADS]: The skill communicates with an external API at
api.muapi.aiusingcurlto process image and video generation requests when CLI aliases are unavailable. This domain is associated with the skill's vendor infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests untrusted data from the
product_nameinput and web search results, which are then interpolated into prompts for script and video generation. - Ingestion points: The
product_namevariable and data retrieved via web search tools are used to construct generation prompts. - Boundary markers: The instructions do not specify the use of delimiters or clear boundaries to separate user-provided or web-retrieved content from system instructions.
- Capability inventory: The skill has the capability to execute shell commands via the
muapiCLI and perform network operations usingcurl. - Sanitization: There is no evidence of input sanitization or validation for the product details or search results before they are processed by the LLM.
Audit Metadata