Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Chinese-language qhkit workflow for generating Kling-style videos, with disclosed setup, credential, upload, and credit-spending steps, but users should notice the persistent API token setup and unpinned package installs.
Before installing, be comfortable with qhkit handling your uploaded images/videos, reference links, generated outputs, and API key. Prefer a reviewed or pinned qhkit version when possible, avoid sending highly sensitive media, and revoke or rotate the qhkit API key if you stop using the skill.
The skill instructs the agent to execute npx @iqinghu/qhkit without pinning a specific version. That allows whatever the registry serves at execution time to run, creating a supply-chain risk if a malicious or compromised release is published, especially because this package is used to handle tokens and media-generation workflows.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The instructions require sending a fixed Chinese onboarding message to the user and state that CLI messages are already user-facing Chinese, implying the interaction is expected to occur in Chinese. The file does not offer any language or locale choice or document a justified region-specific language constraint, which can violate language/locale policy.
The fallback command npx --yes sharp-cli pulls and executes the latest package version from the registry with no version pinning. Because this path is triggered automatically for file processing, a compromised upstream release could lead to arbitrary code execution in the agent environment.