ai-ecommerce-expert-viral-sales-video

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 运行时工作流在调用 IMIVA MCP 工具 create_viral_video_copy_task 时，会将用户提供的 additionalRequirements 等自由文本直接作为 --args 参数传入并被 MCP 消费（IMIVA API：https://imiva.ecpro.com）。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill invokes npx to run the package "@infimind/ecom-content-cli@latest" at runtime (scripts/imiva_mcp.py), which will fetch and execute remote npm package code that the skill depends on.