Security audit
Security checks for vulnerabilities and agentic risk
The skill’s image-generation purpose is coherent, but it asks the agent to install unpinned tooling and persist API credentials on the host, so users should review it before installing.
Install only if you are comfortable with this skill installing Node/npm tooling, running npm/npx packages from the network, uploading product images to qhkit, and storing a qhkit API token on the machine. Prefer reviewing or pinning package versions and using an environment-scoped token before use.
The skill expands beyond image generation into host bootstrapping by directing the agent to install Node.js and global npm packages. This materially increases attack surface by encouraging arbitrary software installation and execution on the local machine, especially from network sources during normal task handling.
The skill instructs the agent to execute npx @iqinghu/qhkit without pinning an exact package version. That allows whatever package version is current at execution time to run with the agent's privileges, increasing supply-chain risk if a future release is malicious, compromised, or simply incompatible.
This duplicated finding identifies the same persistence behavior: installing Node.js into a user directory and altering PATH for continued use. Such host-state modification is unnecessary for a content-generation skill and increases the chance of unintended persistence, environment drift, and later abuse of the installed runtime.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicated finding identifies the same persistence behavior: installing Node.js into a user directory and altering PATH for continued use. Such host-state modification is unnecessary for a content-generation skill and increases the chance of unintended persistence, environment drift, and later abuse of the installed runtime.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill instructs the agent to persist authentication credentials using qhkit config set --token <密钥> or environment variables on the host. Persisting user-supplied API secrets on the machine creates a credential-handling risk: tokens may be exposed to later processes, other sessions, logs, shell history, or unintended reuse.
Line L076 instructs the agent that the site 'must' be 'cn' and to override an existing international configuration unless the user explicitly says they use AutoAGC. This imposes a locale/region choice by default rather than offering the user a choice, which matches the language/locale policy violation criteria.
The command npx --yes sharp-cli fetches and executes the latest published package at runtime without version pinning. Because this occurs in an automated remediation path, it could silently pull and run unreviewed code on the host, turning a simple image-processing step into a supply-chain execution risk.