Security audit
Security checks for vulnerabilities and agentic risk
The skill is for Ozon category lookup, but it deserves review because it tells the agent to install or upgrade local tooling and configure a service token if dependencies are missing.
Install only if you are comfortable letting the agent set up qhkit/Node tooling and use a Qinghu API token. Prefer reviewing or approving any npm install, npx run, Node download, PATH change, qhkit upgrade, and token configuration before execution; also confirm paid qhkit calls and expected credit use before allowing lookups.
The trigger description includes broad language like '同类需求时必须触发', which can cause the skill to activate for loosely related requests. Over-broad invocation increases the chance that an agent executes the skill in unintended contexts, including contexts where installation, credential handling, or paid external calls are inappropriate.
The listed trigger phrase '查二级类目 ID' is generic and does not uniquely bind to Ozon or this specific tool. In a multi-skill environment, that ambiguity can lead to accidental invocation of this skill for unrelated category-ID requests.
This skill's stated purpose is a simple category lookup, but it contains extensive environment bootstrap and software installation instructions, including installing Node, npm packages, and configuring credentials. That materially expands its authority and attack surface, enabling the skill to modify the host environment and persist tooling beyond what is necessary for a narrow data-query task.
The skill instructs the agent to execute npx @iqinghu/qhkit without pinning an exact package version, which can fetch whatever version is current at execution time. That creates a supply-chain and reproducibility risk: behavior can change unexpectedly, and a compromised or malicious package release could be executed in the user's environment.
This duplicate finding points to the same persistence behavior: unpacking Node into the user's home directory and exporting a modified PATH. In the context of a category-query skill, persistent environment modification is unnecessary and increases long-term risk if the installed runtime or subsequent packages are abused.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same persistence behavior: unpacking Node into the user's home directory and exporting a modified PATH. In the context of a category-query skill, persistent environment modification is unnecessary and increases long-term risk if the installed runtime or subsequent packages are abused.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
No suspicious patterns detected.