Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed video-generation helper that installs and configures a third-party CLI, with some normal but important dependency and API-key risks to understand.
Before installing, be comfortable with qhkit being installed on your machine, your API key being stored locally or passed via environment variable, and your media/links being sent to iqinghu for processing. Confirm cost estimates before generation, and prefer pinned or preinstalled dependencies in higher-security environments.
The skill instructs the agent to execute npx @iqinghu/qhkit without pinning a specific version, which allows whatever package version is current at execution time to run with the agent's privileges. If the upstream package is compromised, typosquatted, or a malicious update is published, this becomes an arbitrary code execution and supply-chain risk.
This duplicated finding points to the same behavior: unpacking executables into the user's home directory and encouraging PATH persistence. In the context of an agent skill that may execute shell commands automatically, durable runtime installation materially increases post-task persistence and trust in later sessions.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicated finding points to the same behavior: unpacking executables into the user's home directory and encouraging PATH persistence. In the context of an agent skill that may execute shell commands automatically, durable runtime installation materially increases post-task persistence and trust in later sessions.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The instructions require relaying user-facing CLI messages as Chinese and repeatedly prescribe Chinese guidance text and Chinese-only handling for user interaction. There is no indication that the skill offers the user a language or locale choice, which can violate language/locale policy for general-purpose skills.
The skill tells the agent to run npx --yes sharp-cli without a pinned version when compressing user-provided images. This fetches and executes the latest published package on demand, creating a direct supply-chain execution path during normal skill use.