skills/wubin1836/ai-ecommerce-expert-agent-skills/ai-ecommerce-expert-product-background-replacement/Gen Agent Trust Hub
ai-ecommerce-expert-product-background-replacement
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
@infimind/ecom-content-clitool from the NPM registry at runtime using thenpxcommand to ensure access to the latest e-commerce content processing capabilities. - [COMMAND_EXECUTION]: The script
scripts/imiva_mcp.pyutilizessubprocess.Popento execute the Node.js-based CLI tool. The command construction uses a list of static arguments, which effectively prevents shell injection vulnerabilities. - [CREDENTIALS_SAFE]: The skill adheres to security best practices by instructing users to provide the
MCP_TOKENthrough environment variables rather than hardcoding credentials within the skill files or prompts.
Audit Metadata