skills/wubin1836/ai-ecommerce-expert-agent-skills/ai-ecommerce-expert-jd-ecommerce-content/Gen Agent Trust Hub
ai-ecommerce-expert-jd-ecommerce-content
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/imiva_mcp.pyutilizessubprocess.Popento execute thenpxcommand. This is used to interface with the official IMIVA e-commerce content CLI package via standard input/output. - [EXTERNAL_DOWNLOADS]: The skill uses
npx -y @infimind/ecom-content-cli@latestto dynamically fetch and execute the latest version of the e-commerce content tool from the public npm registry. This is a standard practice for utilizing Model Context Protocol (MCP) tools provided by specific service vendors. - [CREDENTIALS_UNSAFE]: The skill requires an
MCP_TOKENfor authentication. The documentation correctly instructs users to provide this through environment variables rather than hardcoding it, and no secrets are present in the skill files.
Audit Metadata