Security audit
Security checks for vulnerabilities and agentic risk
The skill does what it says, but it also tells the agent to install and configure external tooling in ways that can persist beyond the immediate query.
Install only if you are comfortable allowing the skill to install or upgrade qhkit/Node tooling and configure a Qinghu API token on your machine. Prefer preinstalling and pinning the qhkit version yourself, avoid npx/@latest execution, and approve paid qhkit calls only after the quoted Qinghu credit cost is shown.
The manifest says the skill 'must trigger' when users ask the listed examples 'or similar needs', which creates an open-ended activation condition. Without explicit exclusions or narrower scope, this can overlap with general requests about trends or content ideas and cause unintended invocation.
The trigger example '蹭热点选题' is not specific to Douyin hot-search retrieval and could apply to many ordinary brainstorming or marketing conversations. Because the skill is narrowly for querying a specific Douyin ranking tool, this phrase risks accidental activation outside the intended context.
The skill's purpose is to fetch Douyin hot-search data, but it contains broad environment-bootstrap instructions including installing Node, globally installing packages, setting tokens, and modifying runtime configuration. Expanding a data-query skill into software installation and environment modification increases attack surface and can cause the agent to perform privileged or persistent actions unrelated to the user's immediate request.
The skill instructs the agent to execute npx @iqinghu/qhkit without pinning an exact package version. Because npx fetches whatever version is current at execution time, this creates a supply-chain risk where a compromised or incompatible upstream release could be executed in the host environment.
This duplicate finding points to the same persistence behavior: downloading and unpacking executables into the user's home directory and altering PATH. In the context of a simple data-retrieval skill, persistent environment mutation is unnecessary and dangerous because it can affect later sessions and trust boundaries.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same persistence behavior: downloading and unpacking executables into the user's home directory and altering PATH. In the context of a simple data-retrieval skill, persistent environment mutation is unnecessary and dangerous because it can affect later sessions and trust boundaries.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
No suspicious patterns detected.