Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed image-text editing skill that uses the qhkit service, with ordinary but important cautions around external image processing and unpinned tool installation.
Install only if you are comfortable with qhkit processing the images you provide and with a Node/npm CLI being installed or updated on the machine. Prefer a reviewed, pinned qhkit version or a managed environment for higher assurance, and verify generated images before using them because prices, text, logos, or product details may change.
The skill description says image-text edit requests '必须触发', and the keyword set is broad enough to match many normal image-editing prompts. Mandatory broad triggering can route unrelated user content to this external tool unexpectedly, increasing the chance of unintended data disclosure, unnecessary external processing, or user-surprising actions.
The skill instructs fallback execution via npx @iqinghu/qhkit <命令> ... without pinning an exact package version. That can cause the environment to fetch whatever version is current at execution time, reducing reproducibility and increasing supply-chain risk if a bad or incompatible release is published.
This duplicated finding points to the same persistent local installation and PATH modification behavior. Even though the instructions include checksum verification, the skill still encourages durable environment changes unrelated to the specific image-edit request, which is a risky pattern for an agent-invoked skill.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicated finding points to the same persistent local installation and PATH modification behavior. Even though the instructions include checksum verification, the skill still encourages durable environment changes unrelated to the specific image-edit request, which is a risky pattern for an agent-invoked skill.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"