muapi-youtube-thumbnail
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
muapiCLI tool andcurlcommands to interact with theapi.muapi.aiendpoint. These commands includemuapi image generate,muapi image edit,muapi auth configure, andmuapi predict waitto manage image processing tasks. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-supplied text to construct prompts for image generation and layout planning, creating a potential surface for indirect injection if inputs contain malicious instructions.
- Ingestion points: User inputs
title,channel_style, andsubject_descriptionare processed in Phase B and Phase C ofSKILL.md. - Boundary markers: The skill lacks explicit boundary markers or instructions for the model to ignore potential commands embedded within the user-provided strings.
- Capability inventory: The skill has the capability to execute shell commands (
curl) and specialized CLI tools (muapi) based on instructions derived from the input data. - Sanitization: There are no defined filters, escaping mechanisms, or validation steps applied to the user inputs before they are interpolated into the workflow.
Audit Metadata