ai-ecommerce-expert-beauty-skincare-ecommerce-content

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/imiva_mcp.py utilizes the subprocess.Popen function to execute the npx utility. This is used to run the official IMIVA ecommerce content CLI tool provided by the vendor.
  • [EXTERNAL_DOWNLOADS]: The skill dynamically downloads and executes the @infimind/ecom-content-cli package from the NPM registry using the npx -y command. This package is the official command-line interface for the Infimind (极睿科技) ecommerce service described in the skill.
  • [CREDENTIALS_SAFE]: The skill documentation and configuration examples correctly identify the use of the MCP_TOKEN environment variable for authentication. It explicitly warns users against hardcoding these credentials within the skill's files or sharing them in logs, aligning with standard security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 08:01 AM
Security Audit — agent-trust-hub — ai-ecommerce-expert-beauty-skincare-ecommerce-content