Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently helps generate MiniMax H3 ecommerce videos through qhkit, with disclosed setup, credential, upload, and credit-use steps.
Before installing, be comfortable with npm-based qhkit setup, sharing a qhkit API key with the agent for configuration, and uploading selected product images or video assets to the service. If you already use qhkit with an international account, confirm the account environment before letting the skill overwrite configuration.
The description says the skill 'must trigger' when a user asks to use MiniMax H3 for 带货/商品/种草/广告视频, which covers very broad commercial video requests without clear exclusion conditions. Although some keywords are specific, terms like 商品视频, 种草视频, and 广告视频 are common request types and the manifest does not provide negative examples or tighter scope boundaries.
The skill instructs use of npx @iqinghu/qhkit without pinning an exact version, which causes execution of whatever package version is current at invocation time. In a privileged agent environment this creates a supply-chain risk: a compromised upstream release or dependency could execute arbitrary code during install/run.
The skill directs installation of Node into $HOME/.local/lib and modifies PATH, with guidance to persist it via shell profile changes. This changes the execution environment beyond the current task and can create lasting state that affects future commands, enabling persistence of an unvetted runtime and increasing the blast radius if that runtime or downloaded archive is compromised.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill directs installation of Node into $HOME/.local/lib and modifies PATH, with guidance to persist it via shell profile changes. This changes the execution environment beyond the current task and can create lasting state that affects future commands, enabling persistence of an unvetted runtime and increasing the blast radius if that runtime or downloaded archive is compromised.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill hardcodes a specific site/locale (cn / domestic account flow) and instructs the agent to overwrite configuration toward that environment unless the user explicitly says otherwise. This can redirect authentication and API use to a different service context than the current machine configuration, risking misrouting of credentials, account confusion, and unintended data transfer across environments.
The fallback image-processing instruction uses npx --yes sharp-cli with no version pin, which fetches and executes the latest published package and dependencies. This is dangerous because it expands the attack surface to a second unpinned supply-chain path and may run arbitrary postinstall or CLI code in the agent environment.