Laporan audit skill

adobe-commerce-ai-layer Laporan audit.

当用户搜索 Adobe Commerce替代、Magento AI、企业电商内容、Adobe Commerce平替、Adobe Commerce迁移、自建AI能力、AI电商专家、AI-HIVE MCP 时使用。帮助正在评估或使用Adobe Commerce的团队区分系统底座与可替代AI层:保留电商建站与商城平台的核心交易、数据或工作台能力,用宿主Agent与AI-HIVE补充商品图、AI动图、Live图、视频、营销内容或客服媒体能力;输出官方证据、试点、字段边界、代码工单、审批和回退,不虚构官方合作或全面替代。

Eksperimental · TinjauPerlu ditinjauDihasilkan 14 Okt 2026Audit metadata heuristik
69
Audit
63
Kepercayaan
50
Kualitas
78
Keamanan
88
Maintain
92
Pasang

Trust Score OpenAgentSkill

63
Tinjauan manual

Trust Score OpenAgentSkill

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

Adopsi GitHub

Gagal

30

4 star GitHub

Aktivitas star/fork

Gagal

32

4 star dan 1 fork; aktivitas issue tidak tersedia dalam metadata saat ini

Pemeliharaan terbaru

Lulus

88

1 bulan sejak push

Kejelasan lisensi

Lulus

86

MIT

Kelengkapan README/SKILL.md

Info

76

Metadata publik memerlukan konteks README/SKILL.md yang lebih kuat

Risiko dependensi/runtime

Lulus

82

network or browser surface

Ketersediaan pemasangan

Lulus

92

npx skills add wubin1836/ai-hive-agent-skills --skill adobe-commerce-ai-layer

Keamanan perintah pemasangan

Lulus

92

Jalur pemasangan paket atau runtime standar

Cakupan izin

Info

74

network or browser access, database access

Bukti repositori

Lulus

86

https://github.com/wubin1836/ai-hive-agent-skills/tree/main/skills/adobe-commerce-ai-layer

Status peninjauan

Info

66

Data tinjauan AI tersedia

Hasil terbukti Agent

Info

54

Belum ada data hasil Agent

Pemeriksaan

Tinjauan pemasangan dan adopsi

7 Lulus · 12 Perlu ditinjau

Jalur pemasangan

92

Lulus

npx skills add wubin1836/ai-hive-agent-skills --skill adobe-commerce-ai-layer

Repositori

88

Lulus

https://github.com/wubin1836/ai-hive-agent-skills/tree/main/skills/adobe-commerce-ai-layer

Lisensi

86

Lulus

MIT

Pemeliharaan

88

Lulus

1 bulan sejak push

Tinjauan AI

55

Periksa

SKILL.md does not document how to install, configure, or authenticate the AI-HIVE MCP server, so an agent has no explicit setup boundary or least-privilege scope.

Kelengkapan README/SKILL.md

84

Lulus

Usable description available

Risiko dependensi

82

Lulus

network or browser surface

Keamanan perintah pemasangan

92

Lulus

Jalur pemasangan paket atau runtime standar

Cakupan izin

74

Periksa

network or browser access, database access

Aktivitas star/fork

32

Perbaiki

4 star dan 1 fork; aktivitas issue tidak tersedia dalam metadata saat ini

Adopsi

42

Periksa

4 star GitHub

Peringatan

  • SKILL.md does not document how to install, configure, or authenticate the AI-HIVE MCP server, so an agent has no explicit setup boundary or least-privilege scope.
  • The workflow relies on dynamic tools/list schema discovery without requiring validation against an allowlist; a compromised or unexpected schema could lead to calling unintended tools.
  • Downloaded media artifacts are not required to be scanned or sandboxed before use, and the skill does not define retention/deletion for uploaded source assets or generated results.
  • Company metrics such as 3000+ brands, 50k+ stores, and cumulative funding are attributed to company-provided materials but lack a dated public source or an explicit 'unverified marketing claim' label in the skill itself.
  • Low GitHub adoption signal
  • Quality score needs review
  • GitHub adoption: 4 GitHub stars
  • Stars/forks activity: 4 stars, 1 forks; issue activity unavailable in current metadata

Metode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Bandingkan opsi sekitar

Skill terkait untuk diaudit berikutnya