Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently helps create SHEIN-style product images through the qhkit/青虎 AI service, with installation and API-key steps disclosed and no hidden destructive or exfiltration behavior found.
Install only if you are comfortable using the qhkit/青虎 service, configuring an API token, and uploading product images to that service. In stricter environments, prefer a reviewed/pinned qhkit install and avoid persistent PATH or global package changes unless you approve them.
The skill instructs use of npx @iqinghu/qhkit without pinning an exact version, which means future executions may fetch whatever package version is current at the time. In a security-sensitive agent workflow, this creates a supply-chain risk: a compromised publisher account, malicious update, or breaking release could execute unexpected code on the host.
This duplicate finding reflects the same persistence behavior: installing binaries under the user home directory and exporting a modified PATH, with instructions to make it survive across shells. In a skill that may run on shared or semi-trusted agent infrastructure, persistent environment changes can alter later task behavior and expand the blast radius of any compromised dependency.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding reflects the same persistence behavior: installing binaries under the user home directory and exporting a modified PATH, with instructions to make it survive across shells. In a skill that may run on shared or semi-trusted agent infrastructure, persistent environment changes can alter later task behavior and expand the blast radius of any compromised dependency.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The embedded user guidance at L069-L076 instructs the agent to send a fixed Chinese onboarding message to users, including account and API key instructions. This imposes a specific language on the interaction without indicating that the user can choose another language, which is a natural-language locale policy concern.
The skill falls back to npx --yes sharp-cli, again without an exact version pin. Because this command may download and run code dynamically during task execution, it exposes the environment to dependency hijacking, malicious updates, or accidental execution of incompatible code.