Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Douyin video-list retrieval integration, with expected external API use and paid-credit handling disclosed, though users should be aware it may install qhkit/Node and send profile URLs to Qinghu.
Before installing, confirm you are comfortable using Qinghu/qhkit, providing a Qinghu API token, sending Douyin profile URLs to that service, and allowing npm/Node tooling to be installed or updated on your machine. For bulk video pulls, review the credit estimate first because calls are paid.
The top-level description uses broad trigger language such as pulling all videos or analyzing a benchmark account, which can overlap with common user requests and cause over-invocation of this external-data skill. Overly broad activation increases the chance of unintended third-party data access, unwanted charges, or disclosure of user-supplied URLs to the external service.
The skill tells the agent to transmit a user-supplied Douyin profile URL to an external service and retrieve third-party account data, but it omits an explicit privacy and data-handling warning. Users may not realize their supplied links and queried account data are being sent to a separate provider, creating consent and privacy-risk issues.
The '何时触发' section provides only positive examples and no scope boundaries or negative examples, so an agent may match loosely related requests and invoke the skill when it should not. In this skill, mistaken invocation can send third-party profile URLs to an external provider and incur paid API calls.
The skill instructs fallback execution via npx @iqinghu/qhkit without pinning an exact package version. That makes runtime behavior depend on the latest package published at execution time, which introduces supply-chain risk and undermines reproducibility if the package is updated maliciously or incompatibly.
The duplicated finding reflects the same persistence concern: the skill prescribes unpacking binaries into the home directory and exporting a modified PATH for later use. In agent contexts, instructions that bootstrap tooling onto the host can become dangerous because they change the execution environment beyond the immediate query and may be performed without sufficiently explicit user consent.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The duplicated finding reflects the same persistence concern: the skill prescribes unpacking binaries into the home directory and exporting a modified PATH for later use. In agent contexts, instructions that bootstrap tooling onto the host can become dangerous because they change the execution environment beyond the immediate query and may be performed without sufficiently explicit user consent.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The guidance mandates the cn site and tells the agent to direct users to the domestic iqinghu.com flow by default, only preserving intl when the user explicitly states they use AutoAGC. This is a locale/site constraint imposed without initial user choice, which may conflict with language or locale preference policy.
No suspicious patterns detected.