The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a Python helper script scripts/imiva_mcp.py that utilizes subprocess.Popen to interact with a CLI tool. The script passes arguments as a list rather than a shell string, effectively mitigating potential command injection risks.
[EXTERNAL_DOWNLOADS]: The skill dynamically downloads and executes the @infimind/ecom-content-cli package using npx. This package is the official client for the IMIVA e-commerce platform developed by the vendor (Beijing Infimind Technology).
[CREDENTIALS_UNSAFE]: Security best practices are followed for credential handling; the skill instructs users to provide the MCP_TOKEN via environment variables instead of hardcoding sensitive keys in the source code or configuration files.
[REMOTE_CODE_EXECUTION]: The script executes a remote package from the NPM registry (@infimind/ecom-content-cli). As this package originates from the official vendor infrastructure and is required for the skill's primary functionality, it is considered a legitimate operation.

ai-ecommerce-expert-viral-video-high-fidelity