ClawHub
Back to skill

Security audit

AI生成电商图 | 电商主图 | 电商详情图 | 电商白底图 | 电商活动图 | LinkPix

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent LinkPix/qhkit ecommerce image-generation helper, with disclosed setup, token use, image upload, and credit-spending behavior, though users should be aware it installs or updates an external CLI package.

Install this only if you are comfortable using the qhkit service for ecommerce image generation, uploading product/reference images to that service, storing or providing a qhkit API token, and spending service credits. For tighter control, review or pin the @iqinghu/qhkit version before installation and avoid permanent PATH/profile changes unless you want the CLI available across sessions.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Rogue AgentSelf-Modification, Session Persistence
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The description says the skill 'must trigger' whenever a user asks to generate or make various kinds of product or marketing images, and includes a long keyword list such as '商品图', '场景图', and '营销图'. These terms are broad and common in ordinary ecommerce/image-editing conversations, and the manifest does not provide exclusion conditions or negative examples to narrow when the skill should not activate.

Content

No source excerpt is available for this finding.

Rp1

Medium
Category
MCP Rug Pull
Confidence
91% confidence
Finding

The skill instructs use of npx @iqinghu/qhkit without pinning a specific version, which allows execution of whatever package version is current at invocation time. That creates a supply-chain risk: a malicious or compromised upstream release could be fetched and executed immediately in a privileged automation context.

Content

No source excerpt is available for this finding.

Session Persistence

Medium
Category
Rogue Agent
Confidence
79% confidence
Finding

This duplicate finding flags the same persistence behavior: unpacking executables into a user-controlled directory and prepending that directory to PATH, potentially across sessions. In an automated environment, that can create lasting state changes and increase the chance of unintended future execution of newly introduced binaries.

Content

Scanner excerpt · SKILL.md (reported line 69)May include surrounding context.

Linux 二进制安装（装到用户目录，无需 root；先校验官方 SHA256 再解包）：

cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"

text

Session Persistence

Medium
Category
Rogue Agent
Confidence
79% confidence
Finding

This duplicate finding flags the same persistence behavior: unpacking executables into a user-controlled directory and prepending that directory to PATH, potentially across sessions. In an automated environment, that can create lasting state changes and increase the chance of unintended future execution of newly introduced binaries.

Content

Scanner excerpt · SKILL.md (reported line 69)May include surrounding context.

Linux 二进制安装(装到用户目录,无需 root;先校验官方 SHA256 再解包):

cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"

text