Security audit
Security checks for vulnerabilities and agentic risk
The skill matches its Lazada image-generation purpose, but it needs review because it asks for an API key in chat and runs unpinned npm tools.
Review before installing. Prefer setting QHKIT_TOKEN locally instead of pasting an API key into chat, and consider pinning or preinstalling reviewed versions of qhkit and any image-compression tools. The skill should only be used if you are comfortable uploading product images and prompts to the qhkit/iqinghu image-generation service and spending account credits after confirmation.
The skill tells the agent to execute npx @iqinghu/qhkit <命令> ... without pinning an exact package version. That allows whatever package version is current at execution time to be fetched and run, creating a supply-chain risk if a malicious or compromised release is published or if behavior changes unexpectedly.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill explicitly instructs the agent to ask the user to send an API key in chat and then use it with qhkit config set --token <密钥>. Requesting raw credentials through conversation increases the chance of credential exposure in chat logs, transcripts, observability systems, or to unintended parties.
The fallback command npx --yes sharp-cli runs an unpinned package directly from the registry. Because this path is suggested for image preprocessing inside the workflow, an attacker controlling or compromising the package release stream could achieve arbitrary code execution in the agent environment.