Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent media-processing integration, but it can install and run external tooling and upload local media to a third-party service without clearly requiring user confirmation.
Review before installing if you may process private media. Expect local images or videos passed to qhkit to be uploaded to LinkPix/iqinghu, and prefer confirming each upload. Install qhkit from a version you trust rather than relying on unpinned npx or @latest execution.
The trigger condition says the skill must activate whenever a user asks to process/optimize/clean video or image material, which is overly broad. In context, this can cause the agent to invoke external tooling and file-upload workflows for casual or ambiguous requests, increasing the chance of unintended data handling and unsafe side effects.
The documentation states that local file paths are accepted and that the CLI will automatically upload them to the external service. Because the skill does not require an explicit privacy warning or consent step before upload, users may unknowingly transmit sensitive media or embedded metadata off-host.
The skill instructs fallback execution via npx @iqinghu/qhkit without pinning an exact package version. That allows whatever version is current at execution time to be fetched and run, creating a supply-chain risk where a compromised, malicious, or breaking upstream release could execute arbitrary code in the user's environment.
This duplicate finding reflects the same persistence behavior: installing executables into a user-controlled directory and modifying PATH, potentially across future shells. In a skill that already fetches external packages and uploads user media, making those runtime changes persistent increases long-term risk if dependencies are compromised.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding reflects the same persistence behavior: installing executables into a user-controlled directory and modifying PATH, potentially across future shells. In a skill that already fetches external packages and uploads user media, making those runtime changes persistent increases long-term risk if dependencies are compromised.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
L61 明确要求“本技能对接国内版 iqinghu.com”，并指示不要按国际站引导，只有用户明确说明使用国际版账号时才保留 intl。该表述默认强制特定站点/地区流程，而非先提供语言或区域选择。