skills/wubin1836/ai-ecommerce-expert-agent-skills/ai-ecommerce-expert-first-last-frame-video/Gen Agent Trust Hub
ai-ecommerce-expert-first-last-frame-video
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a helper script (scripts/imiva_mcp.py) that executes the Model Context Protocol server via subprocess. This is used to bridge the agent context to the platform's content generation tools.
- [EXTERNAL_DOWNLOADS]: The skill triggers the download and execution of the official '@infimind/ecom-content-cli' package from the npm registry using npx. This package is the verified CLI tool for the IMIVA ecommerce service.
- [DATA_EXFILTRATION]: The skill transmits product assets and generation prompts to the vendor's API endpoint at imiva.ecpro.com. This behavior is consistent with the skill's primary purpose of remote video generation and uses the official service infrastructure.
Audit Metadata