Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent wrapper for generating e-commerce detail-page images with qhkit, with ordinary setup risks around npm installs and API-token handling.
Before installing, be comfortable with the qhkit npm package running locally, product images being uploaded to the Qinghu service, and an API token being configured. Prefer a secure environment variable or protected local config for the token, and review npm package provenance or pin a version if reproducibility matters.
The description says the skill must trigger whenever the user asks to generate detail images, detail pages, long images, product intro images, or selling-point images. These phrases are broad ecommerce requests rather than narrowly scoped invocation conditions, and the file does not provide exclusion conditions or negative examples to prevent unintended activation.
The skill instructs fallback execution via npx @iqinghu/qhkit <命令> ... without pinning a specific version. That causes code to be fetched and executed at runtime from the package registry, which increases supply-chain risk and makes behavior non-reproducible if the package is updated or compromised.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill tells the operator to set an API token via command line or environment variable but does not warn against exposing secrets in shell history, logs, screenshots, or chat transcripts. In an agent setting, this is especially risky because users may paste credentials directly into a conversational workflow or command output may be retained.