Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed LinkPix/qhkit video translation workflow; its main risks are expected dependency installation, API token setup, and uploading videos to an external service.
Install only if you are comfortable using the qhkit/LinkPix service, installing or updating npm tooling, providing a qhkit API token, and uploading video files for processing. Review commands before allowing global npm installs or PATH changes, and prefer pinned or reviewed package versions in sensitive environments.
The description is written to require activation for specific Chinese-language request patterns and the document consistently instructs responses and user-facing behavior in Chinese. This creates a language/locale constraint without user opt-in or an explicit statement that the skill is intentionally limited to Chinese-language users.
The skill contains detailed instructions to install software globally, modify PATH, and bootstrap Node.js, but it does not require an explicit user confirmation before making local system changes. In an agentic context, this increases the chance of unexpected environment modification, persistence, or execution of newly downloaded code beyond the user's immediate intent.
The skill instructs use of npx @iqinghu/qhkit without pinning a specific version, which allows whatever package version is current at execution time to be fetched and run. That creates a supply-chain risk: a compromised latest release or unexpected breaking change could execute unreviewed code on the user's machine.
This duplicate finding points to the same persistence behavior: unpacking a runtime into the user's home directory and altering PATH for future command execution. In the context of an agent skill, host modification and session persistence increase the blast radius if the package or follow-on commands are abused or misused.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same persistence behavior: unpacking a runtime into the user's home directory and altering PATH for future command execution. In the context of an agent skill, host modification and session persistence increase the blast radius if the package or follow-on commands are abused or misused.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"