The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/imiva_mcp.py invokes the npx command using subprocess.Popen. This execution is used to launch the official IMIVA MCP client and is implemented securely, passing arguments through a direct pipe via JSON-RPC rather than using shell string interpolation.
[EXTERNAL_DOWNLOADS]: The skill leverages npx to download and run the @infimind/ecom-content-cli package from the npm registry. This is the official integration package for the IMIVA e-commerce platform services provided by Beijing Infimind Technology.
[PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes untrusted user data (product descriptions and selling points) to generate marketing materials.
Ingestion points: Product images, selling points, and usage scenarios provided as arguments to the generation tasks in SKILL.md.
Boundary markers: Not present in the Python wrapper script.
Capability inventory: The skill executes the vendor's CLI tool via a subprocess, which performs network operations to the IMIVA API.
Sanitization: External content is serialized into structured JSON objects before being sent to the underlying CLI tool, which prevents standard command injection.

ai-ecommerce-expert-aliexpress-ecommerce-content