commercevault-edd-digital-commerce

SUSPICIOUS. The stated purpose is coherent for an EDD commerce integration, but the distribution and publisher story is not: the skill asks users to install CommerceVault-branded npm/pip/docker artifacts while its official resources point to a differently named personal GitHub project. That mismatch, plus credential forwarding to unverifiable third-party tooling and unpinned/latest installs, creates disproportionate supply-chain and data-handling risk even though the body mostly looks like normal documentation.