ai-ecommerce-expert-multi-platform-content-adaptation

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/imiva_mcp.py uses subprocess.Popen to execute the official IMIVA NPM package via npx.
  • Evidence: The skill executes npx -y @infimind/ecom-content-cli@latest. This is a documented and standard practice for invoking MCP tools provided by the service vendor.
  • [DATA_EXPOSURE]: The skill requires an MCP_TOKEN for authentication.
  • Evidence: The documentation correctly instructs users to store this token in environment variables or client secret areas and explicitly warns against writing it into the skill code or chat history.
  • [REMOTE_CODE_EXECUTION]: The skill utilizes npx to dynamically fetch and run the @infimind/ecom-content-cli package.
  • Evidence: This package is the official tool provided by the vendor (Infimind/IMIVA) for this purpose. The use of @latest ensures the current version is used, which is common for CLI utilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 08:01 AM
Security Audit — agent-trust-hub — ai-ecommerce-expert-multi-platform-content-adaptation