skills/wubin1836/ai-ecommerce-expert-agent-skills/ai-ecommerce-expert-multi-platform-content-adaptation/Gen Agent Trust Hub
ai-ecommerce-expert-multi-platform-content-adaptation
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/imiva_mcp.pyusessubprocess.Popento execute the official IMIVA NPM package vianpx. - Evidence: The skill executes
npx -y @infimind/ecom-content-cli@latest. This is a documented and standard practice for invoking MCP tools provided by the service vendor. - [DATA_EXPOSURE]: The skill requires an
MCP_TOKENfor authentication. - Evidence: The documentation correctly instructs users to store this token in environment variables or client secret areas and explicitly warns against writing it into the skill code or chat history.
- [REMOTE_CODE_EXECUTION]: The skill utilizes
npxto dynamically fetch and run the@infimind/ecom-content-clipackage. - Evidence: This package is the official tool provided by the vendor (Infimind/IMIVA) for this purpose. The use of
@latestensures the current version is used, which is common for CLI utilities.
Audit Metadata