Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed e-commerce video generation helper; its main risks are normal package installation and API token handling, not hidden or destructive behavior.
Before installing, confirm you trust the @iqinghu/qhkit npm package and the iqinghu service, keep the qhkit API token private, avoid pasting tokens into shared terminals or logs, and prefer pinned or reviewed package versions if your environment has strict supply-chain requirements.
The manifest says the skill 'must trigger' whenever the user asks to generate or make a video, ad video, promo film, or 'one-click video creation'. These phrases are broad and likely to overlap with many ordinary requests, and the file does not provide explicit negative examples or tight scope constraints in the trigger declaration.
The skill recommends falling back to npx @iqinghu/qhkit without pinning a version, which causes execution of whatever package version is current at runtime. That creates a supply-chain risk: behavior can change unexpectedly or a compromised upstream release could execute arbitrary code when the skill is used.
This duplicate finding points to the same behavior: user-level installation and PATH modification for Node can persist beyond the immediate task and alter future command resolution. In a skill context that also installs and runs packages, persistent environment mutation meaningfully increases operational and supply-chain risk.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same behavior: user-level installation and PATH modification for Node can persist beyond the immediate task and alter future command resolution. In a skill context that also installs and runs packages, persistent environment mutation meaningfully increases operational and supply-chain risk.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill instructs users to set an API token via command line or environment variable but does not clearly warn that the token is sensitive or caution against exposing it in shell history, logs, screenshots, or shared environments. In an agent setting, this increases the chance of credential leakage and subsequent unauthorized use of the account.
The instruction says to relay the CLI message and notes that it is already user-facing Chinese, which effectively standardizes user communication in Chinese. The file does not offer the user a language or locale choice, nor does it clearly justify a mandatory Chinese-only interaction policy.