muapi-action-figure-generator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited muapi-action-figure-generator (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Convert a photo of a person into a custom 3D action figure, complete with collectible toy packaging.
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
user_image | image_url | yes | — | A clear photo of the person to be turned into an action figure. |
toy_theme | text | no | superhero | The theme of the action figure (e.g. superhero, doctor, explorer, sci-fi). |
If {{user_image}} is not provided, ask the user to upload their photo.
Once the photo is available, submit the plan with ONE step to generate the action figure:
muapi image edit (model=nano-banana-2-edit):{{user_image}}A high-quality 3D stylized action figure based on the person in the input image. The action figure should maintain the person's likeness (face, hairstyle, skin tone) but be rendered as a plastic toy with visible joints and a semi-glossy finish. The character is dressed in a {{toy_theme}} outfit. The figure is displayed inside its original collectible cardboard and plastic blister packaging. The packaging has the person's name printed on it and features clean, modern graphic design. Soft studio lighting, realistic plastic textures, 8k resolution, cinematic look.Present the generated action figure to the user. You can also suggest creating different themes (e.g., changing the character from a doctor to a space explorer).
action figure, custom toy, toy packaging, character toy, collectible figure
muapi CLI commands. Use muapi auth configure first if MUAPI_API_KEY is unset.curl -X POST https://api.muapi.ai/api/v1/<endpoint> -H "x-api-key: $MUAPI_API_KEY" -H 'content-type: application/json' -d '{...}' and poll with muapi predict wait <request_id>.{{input_name}} placeholders with the user's actual inputs before issuing each call.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.