Security audit
Security checks for vulnerabilities and agentic risk
This is a disclosed e-commerce image-generation skill, with practical install and privacy cautions around its CLI setup and image uploads.
Install only if you are comfortable with the qhkit npm CLI being installed or updated and with selected product/reference images being sent to Qinghu's service. Prefer a reviewed pinned CLI version in managed environments, and avoid using the skill to directly copy another party's protected brand assets.
The manifest description says the skill must trigger when users ask to '照着某张爆款图做主图' or '复刻图片风格', and the keyword list includes broad phrases like '照着做' and '相似风格主图'. Especially '照着做' is common everyday language and the trigger scope does not provide exclusions or negative examples, increasing the risk of unintended invocation.
The skill instructs fallback execution via npx @iqinghu/qhkit <命令> ... without pinning a specific version. That means each invocation may fetch the latest package from the registry, creating supply-chain risk and reducing reproducibility; if the package is compromised or a breaking release is published, the agent could run unreviewed code.
This duplicate finding points to the same behavior: unpacking a runtime into the user home directory and exporting a modified PATH. In an agent skill, persistent dependency installation is more dangerous than in ordinary documentation because it can normalize self-modifying behavior and leave durable changes that outlive the task.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same behavior: unpacking a runtime into the user home directory and exporting a modified PATH. In an agent skill, persistent dependency installation is more dangerous than in ordinary documentation because it can normalize self-modifying behavior and leave durable changes that outlive the task.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The file instructs the agent to relay CLI error messages because they are already '面向用户的中文', which implies responses should be given in Chinese regardless of user preference. This is a language-policy constraint stated in natural language, and the file does not offer users a language choice or opt-in.