Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed LinkPix/qhkit workflow for generating ecommerce main images from reference images, with ordinary but real dependency and account-token considerations.
Before installing, confirm you trust the @iqinghu/qhkit npm package and the iqinghu.com/LinkPix service, because your API token and uploaded product/reference images are used by that external service. Prefer a pinned qhkit version for reproducibility, and avoid adding Node PATH changes to shell startup files unless you want that installation to persist.
The manifest says the skill must trigger when users ask to '照着某张爆款图做主图' and includes keywords like '照着做' and '相似风格主图'. Especially '照着做' is broad and could collide with ordinary requests, and the description does not provide negative examples or constraints clarifying when similar image-editing requests should not invoke this skill.
The skill recommends executing npx @iqinghu/qhkit without pinning an exact package version. That allows whatever version is current at execution time to be fetched and run, increasing supply-chain risk and reducing reproducibility if the package is updated, compromised, or publishes breaking behavior.
The duplicated finding points to the same persistence behavior: unpacking binaries into a user directory and exporting a modified PATH, with guidance to make it survive across commands. In an agent context, persistence is more dangerous because it can silently influence later executions and expand the blast radius of any compromised binary.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The duplicated finding points to the same persistence behavior: unpacking binaries into a user directory and exporting a modified PATH, with guidance to make it survive across commands. In an agent context, persistence is more dangerous because it can silently influence later executions and expand the blast radius of any compromised binary.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The file instructs the agent to use the China site configuration and specifically says not to guide users with the international site unless they explicitly say they use it; nearby lines also state CLI messages are user-facing Chinese. This effectively imposes a language/locale path by default without offering the user a general language or locale choice.