Skills
Navigate
skills/wubin1836/ai-ecommerce-expert-agent-skills/ai-ecommerce-expert-amazon-ecommerce-content/Gen Agent Trust Hub

ai-ecommerce-expert-amazon-ecommerce-content

Warn

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/imiva_mcp.py uses the npx command to download the @infimind/ecom-content-cli package from the public NPM registry when the skill is executed.
  • [REMOTE_CODE_EXECUTION]: The skill executes the downloaded @infimind/ecom-content-cli package using subprocess.Popen in scripts/imiva_mcp.py. This pattern allows the execution of code fetched from a remote source at runtime.
  • [COMMAND_EXECUTION]: The skill invokes local system commands, including npx and shutil.which, to initialize and interact with the external MCP (Model Context Protocol) server.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 25, 2026, 08:01 AM
Security Audit — agent-trust-hub — ai-ecommerce-expert-amazon-ecommerce-content