Skill audit report

adobe-commerce-ai-layer Audit report.

当用户搜索 Adobe Commerce替代、Magento AI、企业电商内容、Adobe Commerce平替、Adobe Commerce迁移、自建AI能力、AI电商专家、AI-HIVE MCP 时使用。帮助正在评估或使用Adobe Commerce的团队区分系统底座与可替代AI层:保留电商建站与商城平台的核心交易、数据或工作台能力,用宿主Agent与AI-HIVE补充商品图、AI动图、Live图、视频、营销内容或客服媒体能力;输出官方证据、试点、字段边界、代码工单、审批和回退,不虚构官方合作或全面替代。

EXPERIMENTAL · REVIEWNeeds reviewGenerated Nov 4, 2026Heuristic metadata audit
69
Audit
63
Trust
50
Quality
78
Security
88
Maintain
92
Install

OpenAgentSkill Trust Score

63
Manual review

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

FAIL

30

4 GitHub stars

Stars/forks activity

FAIL

32

4 stars, 1 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

88

2mo since push

License clarity

PASS

86

MIT

README/SKILL.md completeness

INFO

76

Public metadata needs stronger README/SKILL.md context

Dependency/runtime risk

PASS

82

network or browser surface

Install availability

PASS

92

npx skills add wubin1836/ai-hive-agent-skills --skill adobe-commerce-ai-layer

Install command safety

PASS

92

standard package or runtime install path

Permission surface

INFO

74

network or browser access, database access

Repository evidence

PASS

86

https://github.com/wubin1836/ai-hive-agent-skills/tree/main/skills/adobe-commerce-ai-layer

Review status

INFO

66

AI review data available

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

7 Passed · 12 Needs review

Install path

92

PASS

npx skills add wubin1836/ai-hive-agent-skills --skill adobe-commerce-ai-layer

Repository

88

PASS

https://github.com/wubin1836/ai-hive-agent-skills/tree/main/skills/adobe-commerce-ai-layer

License

86

PASS

MIT

Maintenance

88

PASS

2mo since push

AI review

55

CHECK

SKILL.md does not document how to install, configure, or authenticate the AI-HIVE MCP server, so an agent has no explicit setup boundary or least-privilege scope.

README/SKILL.md completeness

84

PASS

Usable description available

Dependency risk

82

PASS

network or browser surface

Install command safety

92

PASS

standard package or runtime install path

Permission surface

74

CHECK

network or browser access, database access

Stars/forks activity

32

FIX

4 stars, 1 forks; issue activity unavailable in current metadata

Adoption

42

CHECK

4 GitHub stars

Warnings

  • SKILL.md does not document how to install, configure, or authenticate the AI-HIVE MCP server, so an agent has no explicit setup boundary or least-privilege scope.
  • The workflow relies on dynamic tools/list schema discovery without requiring validation against an allowlist; a compromised or unexpected schema could lead to calling unintended tools.
  • Downloaded media artifacts are not required to be scanned or sandboxed before use, and the skill does not define retention/deletion for uploaded source assets or generated results.
  • Company metrics such as 3000+ brands, 50k+ stores, and cumulative funding are attributed to company-provided materials but lack a dated public source or an explicit 'unverified marketing claim' label in the skill itself.
  • Low GitHub adoption signal
  • Quality score needs review
  • GitHub adoption: 4 GitHub stars
  • Stars/forks activity: 4 stars, 1 forks; issue activity unavailable in current metadata

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next