Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed LinkPix/qhkit workflow for generating product scene images, with some install and account-configuration risks users should understand before use.
Install only if you are comfortable using the qhkit npm package and sending product images/prompts to the LinkPix/iqinghu service. Check whether you use the domestic iqinghu.com account or an international AutoAGC account before setting tokens, and prefer reviewed or pinned dependency versions in controlled environments.
The description says scene-image requests '必须触发', with many broad keywords spanning multiple ecommerce and lifestyle contexts. This can cause the skill to activate in unintended situations, sending user inputs or local files into image-generation workflows without sufficiently precise user intent confirmation.
The '何时触发' section provides only positive examples and lacks negative boundaries, disambiguation rules, or cases where similar phrases should not invoke the skill. In an agent setting, vague activation criteria increase accidental tool use and unintended disclosure of prompts, files, or tokens to the external CLI/service.
The skill explicitly recommends falling back to npx @iqinghu/qhkit <命令> without pinning a version. That allows execution of whatever package version is current at invocation time, creating a supply-chain risk if a malicious or broken release is published or if dependency resolution changes unexpectedly.
This finding duplicates the same persistent install-and-PATH modification behavior at the same location. The guidance normalizes writing binaries into the user's home directory for reuse, which creates session persistence and makes later executions depend on artifacts fetched during a prior run.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This finding duplicates the same persistent install-and-PATH modification behavior at the same location. The guidance normalizes writing binaries into the user's home directory for reuse, which creates session persistence and makes later executions depend on artifacts fetched during a prior run.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill instructs the agent to force the domestic cn site configuration and override existing intl settings unless the user explicitly says otherwise. That can reroute authentication and API usage to a different service region without clear user consent, risking account misuse, privacy issues, and misdelivery of user data or credentials.