Skills
skills/aradotso/data-skills/commercevault-edd-ecommerce-orchestrator/Gen Agent Trust Hub

commercevault-edd-ecommerce-orchestrator

Warn

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill contains instructions to download a project from an external, unverified GitHub repository: https://github.com/dhapat3927/mcp-edd-analytics-vantage.git. This repository is not associated with the skill author or a trusted organization.
  • [REMOTE_CODE_EXECUTION]: The installation guide instructs the user to run npm install or pip install -r requirements.txt after cloning the unverified repository. These commands can execute arbitrary code defined in the downloaded project's setup scripts or post-install hooks.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 12, 2026, 12:54 AM
Security Audit — agent-trust-hub — commercevault-edd-ecommerce-orchestrator