skills/wubin1836/ai-ecommerce-expert-agent-skills/ai-ecommerce-expert-horizontal-16-9-tvc/Gen Agent Trust Hub
ai-ecommerce-expert-horizontal-16-9-tvc
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/imiva_mcp.pyuses the Pythonsubprocessmodule to execute the IMIVA MCP command-line tool. The implementation is secure as it avoids shell interpolation and communicates with the underlying process via structured JSON-RPC over standard input/output. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto dynamically load the@infimind/ecom-content-clipackage. This is the official command-line interface provided by the service vendor (Infimind) and is required for the skill's primary functionality of video generation. - [CREDENTIALS_SAFE]: The documentation and scripts correctly advise users to store sensitive API tokens in environment variables (
MCP_TOKEN) rather than hardcoding them in the skill or configuration files, adhering to industry security standards.
Audit Metadata