Security audit
Security checks for vulnerabilities and agentic risk
The skill is coherent for generating ad videos, but it should be reviewed because it can install or upgrade an unpinned CLI and submit paid, non-cancelable video jobs without a required approval step.
Before installing, verify you trust the @iqinghu/qhkit npm package and prefer a pinned version where possible. Do not let an agent submit qhkit video generate until it has shown the exact prompt, inputs, estimated credits, and that the task cannot be canceled, and you have explicitly approved the charge.
The metadata says ad-related requests 'must trigger' this skill using broad keywords, which can cause the agent to invoke external tooling in cases where the user's request is only loosely related. Over-broad mandatory triggering increases the chance of unnecessary package installation, credential prompting, or paid API actions outside the user's clear intent.
The skill recommends invoking npx @iqinghu/qhkit without pinning a specific version, which allows whatever package version is current at execution time to be fetched and run. In a security-sensitive agent environment, this creates a supply-chain risk because behavior can change unexpectedly or a compromised upstream release could execute arbitrary code.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill discusses estimation, polling, and delivery of paid video generation tasks, and notes that tasks cannot be canceled, but it does not require an upfront explicit user confirmation before irreversible credit consumption. In an agent context, this can lead to unintended charges or irreversible submissions if the tool is triggered automatically or the user is not clearly warned before execution.
The markdown lists two example utterances, but it does not specify whether these are exhaustive triggers, optional examples, or part of a broader class. Without explicit constraints, activation remains ambiguous for similar everyday requests about promotional videos.