ai-ecommerce-expert-product-background-replacement

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the @infimind/ecom-content-cli tool from the NPM registry at runtime using the npx command to ensure access to the latest e-commerce content processing capabilities.
  • [COMMAND_EXECUTION]: The script scripts/imiva_mcp.py utilizes subprocess.Popen to execute the Node.js-based CLI tool. The command construction uses a list of static arguments, which effectively prevents shell injection vulnerabilities.
  • [CREDENTIALS_SAFE]: The skill adheres to security best practices by instructing users to provide the MCP_TOKEN through environment variables rather than hardcoding credentials within the skill files or prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 08:01 AM
Security Audit — agent-trust-hub — ai-ecommerce-expert-product-background-replacement