Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent helper for generating ecommerce videos through qhkit, with disclosed installs, API-key setup, media upload, and confirmation before spending credits.
Before installing, be comfortable with npm-based tooling, a qhkit API token being configured locally, and your selected media being uploaded to Qinghu for generation. Review estimates carefully because generate actions can consume credits and cannot be cancelled after submission.
The skill instructs use of npx @iqinghu/qhkit without pinning a specific package version. That makes execution depend on the latest published package at runtime, creating a supply-chain risk where a compromised or breaking upstream release could be fetched and executed automatically. In this skill's context, the package is then used to handle credentials and make external API calls, which increases the blast radius.
This duplicated finding identifies the same persistence behavior: unpacking Node into a user directory and altering PATH. In a skill context, instructing persistent environment changes is riskier than transient command use because it leaves long-lived executables available for future sessions and can unintentionally override system binaries or become a foothold if the installed tree is later modified.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicated finding identifies the same persistence behavior: unpacking Node into a user directory and altering PATH. In a skill context, instructing persistent environment changes is riskier than transient command use because it leaves long-lived executables available for future sessions and can unintentionally override system binaries or become a foothold if the installed tree is later modified.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The file repeatedly instructs the agent to relay messages to the user in Chinese, for example stating that CLI messages are already user-facing Chinese and should be forwarded as-is. This imposes a specific language on user communications without offering a language choice or documenting a justified locale restriction.
The skill falls back to npx --yes sharp-cli without a pinned version, which causes on-demand retrieval and execution of whatever version is current in the registry. Even though this is framed as an image-compression helper, it is still arbitrary third-party code execution from the network and could be abused through a malicious release or dependency compromise.