Security audit
Security checks for vulnerabilities and agentic risk
This skill is aimed at Amazon keyword trend lookup, but it also tells the agent to install and upgrade runtime tools and configure credentials in ways users should review first.
Install only if you are comfortable with the agent installing or upgrading qhkit/Node, using npm or npx, storing a Qinghu API token, and spending Qinghu credits after approval. Prefer a preinstalled, pinned qhkit version and review any PATH or shell profile changes before allowing setup.
The manifest description says the skill '必须触发' when the user says several example phrases '或提出同类需求时'. That 'similar requests' wording is ambiguous and does not define what should or should not count as in-scope, which can cause unintended invocation for ordinary discussion about keyword trends.
The skill contains extensive bootstrap instructions to install Node, install packages globally, set API tokens, and modify the runtime environment, far beyond the minimum needed to query keyword trends. This materially expands the attack surface by encouraging network downloads, package execution, credential handling, and local system changes inside a skill that should primarily perform a narrow data lookup.
The skill instructs the agent to execute npx @iqinghu/qhkit without pinning an exact version, which allows retrieval of whatever package version is current at execution time. In an agentic environment this creates supply-chain risk and makes behavior non-reproducible; a malicious or compromised upstream release could execute arbitrary code under the agent's privileges.
This duplicate finding points to the same persistent installation behavior: extracting binaries under the user's home directory and exporting a new PATH. Even with checksum verification, the persistence and environment mutation are dangerous in a skill because they outlive the immediate operation and can influence future agent behavior.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same persistent installation behavior: extracting binaries under the user's home directory and exporting a new PATH. Even with checksum verification, the persistence and environment mutation are dangerous in a skill because they outlive the immediate operation and can influence future agent behavior.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
No suspicious patterns detected.