Security audit
Security checks for vulnerabilities and agentic risk
The skill is a disclosed WeChat video-generation workflow using qhkit, with normal media upload and paid task submission controls, plus some install/versioning caveats users should review.
Install only if you are comfortable with qhkit/npm tooling, user-level PATH changes, and sending selected media plus a qhkit API key to the provider. Prefer a pinned qhkit version and approve any paid generate call only after reviewing the model, duration, media, language, and estimated credits.
The markdown states '默认语言 简体中文', which imposes a specific language choice by default. Under the policy, locale or language constraints should be user-selected, explicitly opt-in, or clearly justified as region-specific; this line does not offer a choice or opt-in.
The skill instructs use of npx @iqinghu/qhkit without pinning an exact package version. That allows whatever version is current at execution time to be fetched and run, creating a supply-chain risk if a malicious or breaking release is published or if dependency resolution changes unexpectedly.
This is a duplicate report of the same session-persistence behavior at the same line: unpacking software into the user's home directory and prepending it to PATH, with guidance to make it persistent across shells. In a skill context, host-environment mutation is more dangerous because the instructions are framed as automatic bootstrap behavior rather than a separately reviewed admin action.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This is a duplicate report of the same session-persistence behavior at the same line: unpacking software into the user's home directory and prepending it to PATH, with guidance to make it persistent across shells. In a skill context, host-environment mutation is more dangerous because the instructions are framed as automatic bootstrap behavior rather than a separately reviewed admin action.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The fallback command npx --yes sharp-cli runs the latest resolved package from the registry without version pinning. Because this path is presented as an automatic remediation for image processing, it could cause execution of an unexpected or compromised package version on the analyst/agent host.