skills/wubin1836/ai-ecommerce-expert-agent-skills/ai-ecommerce-expert-tiktok-shop-ecommerce-content/Gen Agent Trust Hub
ai-ecommerce-expert-tiktok-shop-ecommerce-content
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/imiva_mcp.pyusessubprocess.Popento executenpx. The command structure and package target are hardcoded to the vendor's official library, preventing unauthorized command injection. - [REMOTE_CODE_EXECUTION]: The skill dynamically fetches and runs the official
@infimind/ecom-content-clipackage from the NPM registry vianpx. This is a necessary and transparent operation for the skill to access its core content generation capabilities. - [DATA_EXFILTRATION]: The skill communicates exclusively with the official vendor domain
imiva.ecpro.com. Authentication is managed securely via theMCP_TOKENenvironment variable, ensuring that sensitive access tokens are not hardcoded or exposed in the skill files.
Audit Metadata