Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed integration for generating ecommerce videos through qhkit, with ordinary but nonzero setup and credential risks.
Before installing, confirm you are comfortable with npm-based tool installation, qhkit storing or using your API token, and possible user-level Node/qhkit environment changes. Review credit estimates carefully because video generation consumes account credits after confirmation.
The skill instructs use of npx @iqinghu/qhkit without pinning a specific version. That makes execution depend on whatever package version is current at runtime, increasing supply-chain risk and enabling unexpected or malicious package updates to be pulled and executed. In this skill context, the command is intended to install and run tooling, so the risk is real rather than theoretical.
This duplicate finding points to the same behavior: unpacking Node.js into a user directory and exporting a modified PATH, with instructions to persist the change across shells. That creates session persistence and environment drift, which can affect future unrelated operations and weakens the principle of least surprise in shared or semi-trusted execution contexts.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same behavior: unpacking Node.js into a user directory and exporting a modified PATH, with instructions to persist the change across shells. That creates session persistence and environment drift, which can affect future unrelated operations and weakens the principle of least surprise in shared or semi-trusted execution contexts.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
Line L077 instructs the agent to avoid using international-site responses and says the CLI message is already user-facing Chinese, while other guidance repeatedly mandates relaying Chinese prompts and messages to the user. This establishes a Chinese-language interaction constraint without offering the user a language choice or opt-in, which is a natural-language locale policy concern.
The skill recommends npx --yes sharp-cli without a version pin, which causes arbitrary current registry content to be fetched and executed when image compression is needed. Because this path is an automatic fallback inside the workflow, it increases the chance that an agent executes unreviewed third-party code from the package registry. The skill context makes this more dangerous because it is framed as an automated remediation step, not a consciously reviewed install.