Security checks across malware telemetry and agentic risk
This ecommerce management skill is mostly purpose-aligned, but it needs review because it handles marketplace credentials and business data while offering high-impact sync/pricing actions without enough safeguards or disclosure.
Review before installing in any real seller environment. Prefer environment variables or a secrets manager over the config file, use least-privilege marketplace and Feishu credentials, avoid --apply and broad sync commands unless you have an external preview/approval process, and treat this version as a prototype because many marketplace API actions are mocked while Feishu syncing is real.
66/66 vendors flagged this skill as clean.
