skills/wubin1836/ai-ecommerce-expert-agent-skills/ai-ecommerce-expert-etsy-ecommerce-content/Gen Agent Trust Hub
ai-ecommerce-expert-etsy-ecommerce-content
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@infimind/ecom-content-clipackage from the NPM registry. This is the official CLI tool provided by Infimind (北京极睿科技有限责任公司) for its e-commerce content services. - [COMMAND_EXECUTION]: The helper script
scripts/imiva_mcp.pyusessubprocess.Popento launch the MCP server. It passes arguments as a list rather than a shell string, which is a secure practice that prevents shell injection vulnerabilities. - [DATA_EXPOSURE]: The skill requires an
MCP_TOKENfor authentication. The documentation correctly instructs users to manage this via local environment variables or client secret stores, explicitly warning against hardcoding the token or including it in logs/screenshots.
Audit Metadata