Security audit
Security checks for vulnerabilities and agentic risk
The skill matches its stated image-generation purpose, but it can install tooling, store or overwrite service configuration, and steer users to a specific external account region with too little explicit user control.
Review before installing if you already use qhkit, have an international AutoAGC configuration, or do not want an agent changing local tool configuration. Use only with images you are comfortable uploading to the LinkPix/IQingHu service, and prefer explicit approval before installing Node/qhkit, setting tokens, changing site settings, or adding PATH changes to shell startup files.
The description says the skill 'must' trigger for a broad set of common image-variation requests, which can cause over-invocation and tool use without sufficiently confirming user intent. In an agent setting, broad mandatory triggering increases the chance of unintended external actions, unnecessary installs, or prompting users for credentials when a simpler non-tool response would suffice.
The skill recommends falling back to npx @iqinghu/qhkit <命令> ... without pinning a specific version. That allows execution of whatever package version is current at invocation time, which weakens supply-chain integrity and reproducibility; a compromised or breaking upstream release could be fetched and executed automatically.
The skill instructs downloading and unpacking Node into $HOME/.local/lib and exporting it into PATH, with optional persistence via shell startup files. Even though it includes checksum verification, it still modifies the user environment and can create persistent execution changes outside the immediate task, which expands attack surface and may outlive the session unexpectedly.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill instructs downloading and unpacking Node into $HOME/.local/lib and exporting it into PATH, with optional persistence via shell startup files. Even though it includes checksum verification, it still modifies the user environment and can create persistent execution changes outside the immediate task, which expands attack surface and may outlive the session unexpectedly.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill instructs the agent to force the domestic cn site and overwrite existing intl configuration unless the user explicitly states otherwise. This can misroute authentication, alter an existing environment's configuration, and steer users to a specific service realm without informed consent, which is risky in multi-tenant or preconfigured environments.