Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed LinkPix/qhkit workflow for model face replacement, with expected external uploads and setup steps, but users should review consent, region, and installation implications.
Install only if you intend to use qhkit/iqinghu for model face replacement. Confirm rights to any real person's likeness, avoid unauthorized face swaps, review where media will be processed, and consider pinning the npm package version or avoiding persistent PATH changes in controlled environments.
The skill declares broad, mandatory trigger conditions for common requests like face swap, model replacement, localization, and person replacement. Overbroad forced invocation can cause the agent to route ordinary image-editing requests into a powerful external tool unnecessarily, increasing the chance of privacy-sensitive processing, policy bypass attempts, or accidental misuse.
The skill instructs fallback execution via npx @iqinghu/qhkit without pinning an exact version, which allows whatever package version is current at execution time to be fetched and run. This weakens supply-chain integrity and reproducibility; if the upstream package is compromised or a breaking release is published, the agent may execute unreviewed code.
This duplicated finding points to the same behavior: extracting Node into a user-controlled directory and altering PATH, with optional persistence into ~/.bashrc. That pattern enables durable modification of the agent's runtime environment and increases risk of uncontrolled software execution in later sessions.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicated finding points to the same behavior: extracting Node into a user-controlled directory and altering PATH, with optional persistence into ~/.bashrc. That pattern enables durable modification of the agent's runtime environment and increases risk of uncontrolled software execution in later sessions.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill hardcodes domestic CN-site/account guidance and effectively steers users toward a specific regional service configuration without explicit user opt-in. This can create privacy, compliance, and data-residency risk if user media or credentials are sent to a jurisdiction or service variant the user did not choose.