skills/wubin1836/ai-ecommerce-expert-agent-skills/ai-ecommerce-expert-koc-2x2-grid/Gen Agent Trust Hub
ai-ecommerce-expert-koc-2x2-grid
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/imiva_mcp.pyutilizessubprocess.Popento interact with the IMIVA content CLI. The implementation is secure as it uses a static list of arguments and avoids the use ofshell=True, which prevents potential command injection attacks. - [EXTERNAL_DOWNLOADS]: The skill facilitates the execution of the
@infimind/ecom-content-clipackage vianpx. This is the documented and expected method for utilizing the vendor's official ecommerce content tools. - [CREDENTIALS_SAFE]: Sensitive authentication tokens are managed exclusively through the
MCP_TOKENenvironment variable. The skill documentation correctly advises against hardcoding secrets, following industry best practices for credential security.
Audit Metadata