skills/wubin1836/ai-ecommerce-expert-agent-skills/ai-ecommerce-expert-beauty-skincare-ecommerce-content/Gen Agent Trust Hub
ai-ecommerce-expert-beauty-skincare-ecommerce-content
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/imiva_mcp.pyutilizes thesubprocess.Popenfunction to execute thenpxutility. This is used to run the official IMIVA ecommerce content CLI tool provided by the vendor. - [EXTERNAL_DOWNLOADS]: The skill dynamically downloads and executes the
@infimind/ecom-content-clipackage from the NPM registry using thenpx -ycommand. This package is the official command-line interface for the Infimind (极睿科技) ecommerce service described in the skill. - [CREDENTIALS_SAFE]: The skill documentation and configuration examples correctly identify the use of the
MCP_TOKENenvironment variable for authentication. It explicitly warns users against hardcoding these credentials within the skill's files or sharing them in logs, aligning with standard security best practices.
Audit Metadata