skills/wubin1836/ai-ecommerce-expert-agent-skills/ai-ecommerce-expert-ecommerce-aigc-marketing/Gen Agent Trust Hub
ai-ecommerce-expert-ecommerce-aigc-marketing
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/imiva_mcp.pyusessubprocess.Popento execute the official IMIVA MCP CLI tool. The command is constructed using a list-based argument structure[npx, "-y", PACKAGE], which is a standard and secure implementation that prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto retrieve the@infimind/ecom-content-clipackage from the npm registry. This is a scoped package belonging to the skill's associated organization (Infimind) and is an expected dependency for the skill's documented e-commerce functionality. - [REMOTE_CODE_EXECUTION]: The skill executes remote code via a package manager, but the target is a specific, vendor-owned CLI tool. This behavior is documented and necessary for the tool's integration with the IMIVA platform.
Audit Metadata