skills/wubin1836/ai-ecommerce-expert-agent-skills/ai-ecommerce-expert-smart-product-retouch/Gen Agent Trust Hub
ai-ecommerce-expert-smart-product-retouch
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/imiva_mcp.pyusessubprocess.Popento invoke the@infimind/ecom-content-clipackage. The execution is handled without a shell, and arguments are passed as a list, which is a secure implementation for the skill's core functionality.- [EXTERNAL_DOWNLOADS]: The skill usesnpxto fetch the@infimind/ecom-content-clitool. This package belongs to the official service provider (Beijing Infimind Technology Co., Ltd.) described in the documentation and is considered a safe dependency within the context of the service's ecosystem.- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by processing external data. - Ingestion points: The
imagesandpromptarguments inscripts/imiva_mcp.pyare populated by user-provided input and product data. - Boundary markers: The instructions guide the agent to maintain product facts, but no technical delimiters or sanitization are applied to the ingested strings.
- Capability inventory: The skill uses subprocess calls to execute commands and performs network operations via the MCP CLI to transmit data to the service provider.
- Sanitization: Content is passed directly into the JSON-RPC request without additional filtering.
Audit Metadata