Security audit
Security checks for vulnerabilities and agentic risk
The skill performs the advertised Douyin link conversion, but its setup instructions are broad for a simple link tool and can install software, change command paths, and configure external-service credentials.
Review this before installing if you do not want a skill to install Node/npm packages, use unpinned external CLI code, or configure Qinghu API credentials on your machine. If used, prefer a preinstalled, pinned qhkit version and provide only Douyin links you are comfortable sending to Qinghu's service.
The trigger condition says the skill must activate for 'similar requests' without clear boundaries, which can cause over-broad invocation. In practice, that raises the risk of routing unrelated user content or URLs to this external tool unexpectedly, with privacy and least-privilege concerns.
The skill does not clearly warn users that submitted Douyin links will be transmitted to a third-party external service (qhkit/青虎数据) for processing. Even if the link seems harmless, it may contain identifiers or private/share-only references, so omission of this disclosure weakens informed consent and privacy expectations.
For a simple link-conversion skill, the environment self-bootstrapping section is overly broad: it directs installation of Node, global packages, PATH changes, alternate registries, and platform-specific setup. This materially expands the action surface from 'convert a URL' to arbitrary software installation and persistent environment modification, increasing the chance of unintended system changes or dependency abuse.
The skill instructs use of npx @iqinghu/qhkit without pinning an exact version, which allows whatever package version is current at execution time to be fetched and run. In a skill context, that creates a supply-chain risk because behavior can change unexpectedly or a compromised upstream release could execute attacker-controlled code.
This duplicated finding flags the same persistence behavior: installing Node binaries under the user's home directory and exporting a modified PATH. That expands the skill from data processing into system reconfiguration, which is disproportionately risky for the claimed purpose and can affect subsequent commands outside the current task.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicated finding flags the same persistence behavior: installing Node binaries under the user's home directory and exporting a modified PATH. That expands the skill from data processing into system reconfiguration, which is disproportionately risky for the claimed purpose and can affect subsequent commands outside the current task.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill tells the agent/user how to obtain and configure API tokens for an external service, including setting persistent credentials in CLI config or environment variables. That exceeds the justified scope of a link-conversion skill and creates credential-handling risk, including accidental disclosure, misuse of the user's account, and durable secrets left on the host.
No suspicious patterns detected.