The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/imiva_mcp.py uses subprocess.Popen to invoke the npx command. This is used to run the official @infimind/ecom-content-cli package, which is the core engine for this skill's ecommerce content generation. The command is constructed using a static list of arguments, preventing shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The skill utilizes npx -y @infimind/ecom-content-cli@latest to fetch the necessary content generation tools from the NPM registry. This ensures the latest version of the vendor's official CLI is used at runtime.
[REMOTE_CODE_EXECUTION]: By running the downloaded NPM package, the skill performs remote code execution of the vendor's tool. This is the primary functional mechanism of the skill and targets the vendor's own infrastructure (imiva.ecpro.com).
[CREDENTIALS_SAFE]: The skill requires an MCP_TOKEN for authentication but correctly instructs users to provide this via environment variables rather than hardcoding it in the skill files or scripts, following industry best practices for secret management.

ai-ecommerce-expert-pet-products-ecommerce-content