Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent LinkPix/qhkit image-editing helper with disclosed installation, token setup, and image-upload behavior, though users should understand the external CLI and API dependency before installing.
Install only if you are comfortable using the qhkit CLI and sending the selected product images, prompts, and API token configuration to iqinghu/LinkPix. For stricter environments, prefer a preinstalled or version-pinned qhkit package and avoid adding fallback Node paths to shell startup files unless needed.
The skill instructs use of npx @iqinghu/qhkit without pinning an exact version, which allows execution of whatever package version is current at invocation time. That creates a supply-chain risk: a compromised or breaking upstream release could be fetched and run automatically in the agent environment.
This duplicate finding points to the same behavior: extracting a runtime into the user's home directory and altering PATH, which can persist beyond the immediate task and influence subsequent executions. In an agent setting, persistence mechanisms are risky because they weaken reproducibility and can be leveraged by later malicious or compromised tooling.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same behavior: extracting a runtime into the user's home directory and altering PATH, which can persist beyond the immediate task and influence subsequent executions. In an agent setting, persistence mechanisms are risky because they weaken reproducibility and can be leveraged by later malicious or compromised tooling.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The instruction says the skill integrates with the domestic cn site and explicitly tells the agent not to guide users to the international site unless the user clearly states they use it, while the surrounding operational text and user-facing messages are all prescribed in Chinese. This creates a locale/language constraint without presenting a user option to choose another language or locale.