Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed video-generation integration, but users should understand it installs CLI tooling and uses an API key for a paid remote service.
Install only if you are comfortable letting the agent install npm-based qhkit tooling, store or use an iqinghu API key, upload provided media/links to the qhkit service, and spend credits after explicit confirmation.
The skill instructs use of npx @iqinghu/qhkit without pinning an exact package version. This causes code to be fetched and executed at runtime from the registry, so a malicious upstream update, dependency compromise, or typosquatted resolution could execute arbitrary code in the agent environment.
The same installation flow persists software under the user's home directory and recommends changes that can survive beyond the current session. Even with checksum verification, persistence expands blast radius by making future commands depend on a manually bootstrapped runtime that may not be centrally managed or monitored.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The same installation flow persists software under the user's home directory and recommends changes that can survive beyond the current session. Even with checksum verification, persistence expands blast radius by making future commands depend on a manually bootstrapped runtime that may not be centrally managed or monitored.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The instruction npx --yes sharp-cli executes an unpinned package directly from the registry and auto-confirms installation. That combination removes an approval checkpoint and exposes the environment to arbitrary code execution if the package, dependency chain, or registry resolution is compromised.
The instruction says to relay the CLI message because it is already user-facing Chinese, which implies responses should be delivered in Chinese regardless of the user's preferred language. This is a natural-language locale policy issue because the skill does not offer a language choice or document a justified locale restriction.