Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed image background replacement integration that installs and uses a qhkit CLI, with ordinary setup and token risks users should understand.
Install this only if you trust the qhkit npm package and iqinghu service. It may install command-line tooling, store or use an API token, upload selected images to the provider, consume account credits, and leave local Node/qhkit configuration behind.
The manifest says the skill 'must trigger' whenever a user asks to change an image background or place a product into a scene, and then lists broad keywords like '换背景' and '更换背景'. These phrases are common user language and the file does not provide negative examples or constraints to distinguish when this skill should not activate, increasing the risk of unintended invocation overlap.
The skill instructs fallback execution via npx @iqinghu/qhkit without pinning a specific version. That allows whatever package version is current at execution time to be fetched and run, which weakens supply-chain integrity and can introduce unexpected or malicious code if the upstream package is compromised or a breaking release is published.
This duplicate finding reflects the same persistence behavior: installing executables under the user's home directory and encouraging PATH changes across shells. In a skill context, that is risky because it normalizes host-environment mutation beyond the immediate task and can have lasting security and operational consequences.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding reflects the same persistence behavior: installing executables under the user's home directory and encouraging PATH changes across shells. In a skill context, that is risky because it normalizes host-environment mutation beyond the immediate task and can have lasting security and operational consequences.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The instructions require using domestic-site key retrieval text and note that CLI messages are already user-facing Chinese, implying a fixed Chinese-language interaction pattern. The file does not offer users a language or locale choice, nor does it clearly justify the restriction as a region-specific skill policy exception.