Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent video-generation helper for Xiaohongshu that uses a disclosed qhkit CLI integration, with some ordinary setup and supply-chain caveats users should understand before installing.
Install this only if you are comfortable using qhkit and sharing selected media with its service. Prefer a vetted or pinned qhkit installation when possible, review any global npm or Node setup before allowing it, and treat the qhkit API key like a credential that should be scoped and revocable.
The markdown explicitly states '默认语言 简体中文', which imposes a language default as part of the skill behavior. Under the policy, language or locale constraints should be user-selected, offered as a choice, or clearly justified as region-specific; this line does not present it as an opt-in choice.
The skill instructs use of npx @iqinghu/qhkit without pinning an exact package version. This creates a supply-chain risk because each invocation may fetch whatever version is current at execution time, allowing unexpected behavior changes or compromise if the upstream package is maliciously updated.
This duplicate finding points to the same persistence behavior: unpacking a downloaded runtime into the user's home directory and prepending it to PATH. In the context of an agent skill, encouraging durable host modification is risky because it can outlive the session and affect later commands or tools unexpectedly.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same persistence behavior: unpacking a downloaded runtime into the user's home directory and prepending it to PATH. In the context of an agent skill, encouraging durable host modification is risky because it can outlive the session and affect later commands or tools unexpectedly.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The fallback image-compression path uses npx --yes sharp-cli with no pinned version, which allows retrieval and execution of the latest published package at runtime. In a skill that may process arbitrary user-provided media, this expands the attack surface to package-registry compromise and unexpected code execution on the host.