Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent TikTok marketing video-generation wrapper, with expected provider setup and media upload behavior, but users should be aware of package-install and credential-handling exposure.
Install only if you are comfortable with qhkit/npm setup, providing a qhkit API key, and uploading product media to the provider. Before any video generation, verify the model, duration, language, reference files, and estimated credit cost, and prefer a controlled or pinned dependency environment when possible.
The description says the skill 'must trigger' whenever a user asks for TikTok viral video generation or TikTok marketing/planting/ad short videos, and also lists many broad keywords. This creates ambiguous, expansive activation criteria that may overlap with ordinary requests about TikTok content and does not provide negative examples or boundaries for when other skills should be used instead.
The markdown states '默认语言 英语', imposing a specific language choice by default rather than asking the user's preference. This is a language/locale policy issue because it can override user expectations or context without explicit opt-in.
The listed triggers include broad phrases like '做TikTok爆款视频 / 带货视频 / 种草视频 / 投放视频' and '明确要发 TikTok' without defining scope, required context, or non-matching cases. This can cause unintended invocation for high-level brainstorming or non-LinkPix requests rather than concrete generation tasks.
The instruction '默认英语，用户指定站点再换 languageLabel' directs the agent to choose English automatically instead of offering a language choice. This is a natural-language locale policy violation because it enforces a language preference without user opt-in.
The skill instructs use of npx @iqinghu/qhkit without pinning an exact package version, which means execution will resolve whatever version is current at runtime. That creates a supply-chain risk: a malicious or compromised newly published version could be pulled and executed automatically in the user's environment.
This guidance creates session persistence by installing Node into a user-owned directory and exporting that location into PATH, affecting future command resolution. In the context of a tool-invocable skill that may autonomously bootstrap dependencies, that persistence makes unintended code execution or environmental drift more dangerous than a one-shot command.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This guidance creates session persistence by installing Node into a user-owned directory and exporting that location into PATH, affecting future command resolution. In the context of a tool-invocable skill that may autonomously bootstrap dependencies, that persistence makes unintended code execution or environmental drift more dangerous than a one-shot command.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The fallback image-processing command uses npx --yes sharp-cli without a pinned version, causing arbitrary latest code from the registry to be downloaded and run. In a skill that encourages autonomous remediation steps, this increases exposure to dependency hijacking, typosquatting, or compromised upstream package releases.