Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent Chinese-language image-generation integration for virtual clothing try-on, with disclosed CLI installation and credential setup steps but no hidden or destructive behavior found.
Before installing, expect this skill to install and run the qhkit Node CLI, ask for a qhkit token, and upload the images you choose to the Qinghu service for generation. Prefer the declared package install path, review any global npm or PATH changes if your environment is sensitive, and only provide images and API keys you are comfortable using with that service.
L03 says the skill "must trigger" whenever the user asks for model try-on, outfit display, flat-lay-to-worn effects, or outfit showcase, then lists many general keywords. Several of these phrases are broad ecommerce/image-editing expressions rather than tightly scoped invocation criteria, which could cause unintended activation without clearer boundaries or exclusions.
The skill instructs the agent to run npx @iqinghu/qhkit without pinning a specific version, which allows execution of whatever package version is current at runtime. That creates a supply-chain risk: a malicious or compromised newly published version could be fetched and executed automatically in the agent environment.
This duplicate finding identifies the same persistence behavior: downloading and unpacking Node into a user-controlled directory, then recommending PATH changes that may survive the session. In agent environments, such persistence can enable later unintended execution paths or make compromise durable if the bootstrap source or package chain is ever abused.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding identifies the same persistence behavior: downloading and unpacking Node into a user-controlled directory, then recommending PATH changes that may survive the session. In agent environments, such persistence can enable later unintended execution paths or make compromise durable if the bootstrap source or package chain is ever abused.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
L87 instructs the agent to relay the CLI message and states it is already user-facing Chinese, implying responses should be passed through in Chinese. This imposes a specific language on the user without opt-in or an alternative locale path.