Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent Douyin commerce workflow, but users should understand it can use Qinghu credentials, consume paid API credits, export result files, and perform confirmed ERP listing actions.
Install only if you intend to use Qinghu with Douyin, 1688, Xiaofeng ERP, and Douyin shop workflows. Before running it, confirm which Qinghu token/account will be used, expect possible Qinghu credit consumption, review exported files for sensitive business data, and approve ERP listing parameters before any live distribution.
The trigger text is very broad and includes generic commerce terms like 跟卖、铺货、上架、采集、新品测试, making accidental activation more likely outside the narrow intended workflow. Because this skill can access credentials, call paid external APIs, export files, and initiate ERP distribution actions, over-triggering materially increases the chance of unintended side effects.
The skill explicitly instructs the agent to read QINGHU_TOKEN / QHKIT_TOKEN from environment variables, which expands its capability from user-directed commerce operations into ambient credential access. Even if intended for convenience, this creates a path for the skill to use secrets the user did not explicitly provide in-context and increases the blast radius if the skill is triggered unexpectedly or too broadly.
The skill mandates automatic export of datasets and reuse of cached local file paths without requiring a user-facing warning or consent for local file creation. In environments where local files persist, are shared, or are accessible to other tools, this can expose potentially sensitive business data and creates unintended data-at-rest risks.
The '何时触发' section lists example utterances like '找同款然后铺到我的抖店' and '批量上架这几个链接', which are plausible everyday requests for other listing or sourcing skills as well. Because the markdown does not include negative examples or explicit constraints distinguishing this skill from adjacent skills, invocation could be broader than intended.
