Security audit
Security checks for vulnerabilities and agentic risk
The skill’s Ozon sales-data purpose is clear, but it also tells the agent to install runtime software and configure credentials on the user’s machine if dependencies are missing.
Review before installing. Use this skill only if you are comfortable letting it install or update Node/qhkit and store a Qinghu API token locally. Prefer a preinstalled, pinned qhkit version managed outside the skill, and confirm paid qhkit calls before allowing data queries.
The description says the skill '必须触发' when the user says the listed examples 'or提出同类需求', which leaves the activation boundary undefined. Without clear constraints or negative examples, similar everyday product-analysis requests could unintentionally invoke this skill.
The standalone trigger phrase '品牌商品清单' is generic and could match many unrelated contexts, platforms, or data needs. The file does not pair it with exclusions or narrow activation conditions, increasing the chance of accidental invocation.
The skill goes beyond describing how to query brand sales and instructs the agent to install software, modify configuration, and set API credentials in the host environment. That expands the skill's authority from data retrieval to system bootstrapping and secret handling, increasing the chance of unintended host changes or credential misuse.
The skill instructs use of npx @iqinghu/qhkit without pinning a specific version, which allows whatever package version is current at execution time to run in the host environment. That creates supply-chain and reproducibility risk, especially because this skill also encourages installation and execution on the user's machine.
Embedding fallback instructions to download and install Node.js binaries is unrelated to the narrow business purpose of querying Ozon brand-product data and materially increases system exposure. Even with checksum guidance, the skill is directing persistent software installation and PATH manipulation on the host, which is inappropriate for a data-query skill.
This is a duplicate persistence pattern at the same line: the skill directs writing binaries into a user-controlled directory and altering the execution path, which leaves lasting environmental changes. In context, that is more dangerous because the skill is supposed to perform a narrowly scoped business query, not establish software on the host.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This is a duplicate persistence pattern at the same line: the skill directs writing binaries into a user-controlled directory and altering the execution path, which leaves lasting environmental changes. In context, that is more dangerous because the skill is supposed to perform a narrowly scoped business query, not establish software on the host.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
No suspicious patterns detected.