muapi-blog-header — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited muapi-blog-header (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create a professional, eye-catching blog post header image sized for web (1200×628) with optional title composition guidance.
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
topic | text | yes | — | The blog post topic or title (e.g. "10 productivity hacks for remote developers"). |
publication_style | text | no | clean, editorial, modern, professional | Visual style matching the blog's brand (e.g. "dark tech blog", "warm lifestyle", "minimalist corporate"). |
dominant_color | text | no | — | Optional primary color direction (e.g. "deep blue", "warm amber", "monochrome"). |
Generate a single, publication-quality blog header in one shot — no plan needed unless the user requests variants.
{{topic}}:{{publication_style}}, editorial photography, 16:9 wide, professional blog header, ample negative space on the left side for title text overlay, {{dominant_color}} color palette.
muapi image generate (model=gpt-image-2-text-to-image, aspect_ratio=21:9).Return:
muapi image edit to adapt it instead of generating from scratch.blog header, blog image, article image, featured image, og image, open graph image, hero image
muapi CLI commands. Use muapi auth configure first if MUAPI_API_KEY is unset.curl -X POST https://api.muapi.ai/api/v1/<endpoint> -H "x-api-key: $MUAPI_API_KEY" -H 'content-type: application/json' -d '{...}' and poll with muapi predict wait <request_id>.{{input_name}} placeholders with the user's actual inputs before issuing each call.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.