Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed ecommerce video-generation workflow, but users should review its package-install and API-token setup before using it.
Before installing, confirm you are comfortable letting the agent install npm tooling, configure a qhkit API token, upload selected product media to the service, and spend account credits only after you approve the generated-task parameters.
The manifest says the skill 'must trigger' when users ask to use Seedance 2.0 for '带货/商品/种草/广告视频', and also lists many broad keywords such as TikTok, Amazon, 商品动态展示, and 电商带货视频. These terms are common across many unrelated commerce-video workflows, so the activation scope is not narrow enough to prevent unintended invocation.
The skill instructs use of npx @iqinghu/qhkit without pinning a specific version, which allows execution of whatever package version is current at invocation time. In a security-sensitive agent environment, this creates a supply-chain risk: a compromised, malicious, or breaking upstream release could be fetched and executed automatically.
This duplicate finding describes the same session-persistence behavior: unpacking a runtime into the user's home directory and altering PATH. In an agent setting, this is risky because it changes future execution context and could be abused or cause unintended side effects across subsequent tasks.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding describes the same session-persistence behavior: unpacking a runtime into the user's home directory and altering PATH. In an agent setting, this is risky because it changes future execution context and could be abused or cause unintended side effects across subsequent tasks.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The instructions require sending a specific Chinese guidance message to users and repeatedly state that error messages should be relayed in Chinese, with no opt-in or language-selection path. This is a natural-language policy concern because it hard-codes a user-facing language instead of offering a locale choice.
The instruction npx --yes sharp-cli downloads and executes the latest CLI package without version pinning. Because it is presented as an automatic fallback for image processing, an agent following this skill could run unreviewed third-party code from the registry, creating a direct supply-chain execution path.
The '何时触发' section gives only positive examples for activation and does not define non-matching cases. Without exclusion conditions, similar requests for broader video generation or adjacent workflows could incorrectly trigger this skill.