Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent e-commerce video-generation helper, but users should notice that it installs command-line tooling, stores an API token, uploads media, and can spend paid credits after confirmation.
Install only if you are comfortable giving qhkit an API key, uploading the selected product images or videos to the service, and approving paid credit usage. Prefer pinned dependency versions and avoid adding PATH changes to shell startup files unless you want the toolchain to persist across sessions.
The description states the skill '完美融合中文语境' and is written as a mandatory routing/usage description without offering any language or locale choice. This can violate language/locale policy because it implicitly constrains usage to Chinese-language output rather than presenting it as an opt-in or region-specific option.
The skill instructs use of npx @iqinghu/qhkit without pinning an exact package version. That allows execution of whatever version is current in the registry at runtime, creating a supply-chain risk if the package is updated maliciously, compromised, or changed incompatibly.
This finding is a duplicate report of the same session-persistence behavior: unpacking Node into the user's home directory and exporting a modified PATH, with text suggesting possible persistence across shells. In an agent skill, instructions that establish long-lived toolchain changes increase the risk of unintended persistence and future misuse of the modified environment.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This finding is a duplicate report of the same session-persistence behavior: unpacking Node into the user's home directory and exporting a modified PATH, with text suggesting possible persistence across shells. In an agent skill, instructions that establish long-lived toolchain changes increase the risk of unintended persistence and future misuse of the modified environment.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill uses npx --yes sharp-cli without a fixed version, so it may download and execute arbitrary newly published code from the registry during runtime. Because this command is suggested as an automatic fallback for image processing, it expands the attack surface beyond the primary toolchain.
The example for qhkit video-quick generate includes "language":"zh", which specifies a fixed language in natural-language-facing behavior. Because the surrounding guidance does not clearly frame this as an example only or require user consent for language selection, it may conflict with language/locale choice expectations.