Security audit
Security checks for vulnerabilities and agentic risk
The skill is coherent for generating MiniMax H3 marketing videos through qhkit, with disclosed external API use and user confirmation before paid generation.
Install only if you are comfortable using the Qinghu/qhkit service, sharing the required API key with the local agent configuration, and uploading the referenced videos/images for processing. Review or pin npm tools in sensitive environments, and check the estimated credits before approving any generate command.
The description contains very broad trigger language and a long list of generic marketing keywords, increasing the chance the skill will be invoked for loosely related requests. In agent environments, overbroad activation can route users into a workflow that installs tools, requests API keys, and performs external actions even when the user did not clearly ask for this specific capability.
The trigger section is underspecified and lacks exclusion conditions, telling the agent to activate on broad phrases like '对标' or '照着做' plus a social link. Given the skill also drives installation, configuration, and external service usage, ambiguous triggering raises the risk of unintended tool execution and unnecessary exposure of user data or credentials.
The skill instructs use of npx @iqinghu/qhkit without pinning a specific version, which allows whatever package version is current at execution time to be fetched and run. Because this is a network-retrieved executable used in an automation context, a malicious upstream release or dependency compromise could lead to arbitrary code execution on the host.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill recommends npx --yes sharp-cli with no version pin, causing a fresh package download and execution of the latest published package during image processing. In an agent or unattended workflow, this creates a supply-chain execution path where a compromised release could run arbitrary code under the user's privileges.