skills/wubin1836/ai-ecommerce-expert-agent-skills/ai-ecommerce-expert-douyin-ecommerce-content/Gen Agent Trust Hub
ai-ecommerce-expert-douyin-ecommerce-content
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script 'scripts/imiva_mcp.py' uses the subprocess module to execute the 'npx' command. This is used to launch the IMIVA MCP server. The implementation uses a list for arguments and avoids shell execution, which is a safe practice.
- [EXTERNAL_DOWNLOADS]: The skill uses 'npx' to download and run the '@infimind/ecom-content-cli' package. This is the intended way to access the IMIVA platform's features and is documented as the official package.
- [CREDENTIALS_SAFE]: The documentation and code correctly handle the 'MCP_TOKEN' by sourcing it from environment variables, preventing sensitive data from being hardcoded or stored in plain text within the skill files.
Audit Metadata