muapi-brand-kit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited muapi-brand-kit (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generate a cohesive brand visual kit — logo concept, color palette moodboard, and typography pairing suggestions.
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
brand_name | text | yes | — | Name of the brand. |
industry | text | yes | — | Industry or niche (e.g. "sustainable fashion", "fintech startup", "artisan bakery"). |
personality | text | no | modern, trustworthy, approachable | 3–5 brand personality adjectives (e.g. "bold, edgy, youthful" or "elegant, minimal, luxury"). |
color_preference | text | no | — | Optional color direction (e.g. "earthy greens and terracotta", "monochrome with gold accents"). |
Generate a multi-asset brand exploration in one parallel plan.
Submit ONE the plan with:
muapi image generate (model=gpt-image-2-text-to-image, aspect_ratio=1:1):muapi image generate (model=nano-banana-2, aspect_ratio=1:1):muapi image generate (model=nano-banana-pro, aspect_ratio=16:9):muapi image generate (model=nano-banana-2, aspect_ratio=1:1):After the plan completes, return:
brand kit, brand identity, logo, branding, brand design, visual identity
muapi CLI commands. Use muapi auth configure first if MUAPI_API_KEY is unset.curl -X POST https://api.muapi.ai/api/v1/<endpoint> -H "x-api-key: $MUAPI_API_KEY" -H 'content-type: application/json' -d '{...}' and poll with muapi predict wait <request_id>.{{input_name}} placeholders with the user's actual inputs before issuing each call.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.