Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed POD image-generation helper that installs and uses the qhkit CLI, with some operational cautions around broad activation, unpinned installs, and account-region defaults.
Install only if you want the qhkit-based Qinghu AI POD workflow. Expect it to install or use npm tooling, configure a qhkit token, and upload selected image files to the provider for generation. Review account region settings before use and avoid submitting copyrighted, private, or sensitive images unless you are comfortable sending them to that service.
The metadata says POD-related mentions '必须触发', making activation broad and mandatory for common design or e-commerce discussions. Overbroad triggering can cause the agent to invoke external tooling unexpectedly, increasing the chance of unnecessary package installation, network access, token handling, and unintended processing of user files.
The skill recommends running npx @iqinghu/qhkit <命令> ... without pinning an exact package version. That allows the executed code to vary over time and increases supply-chain risk, especially because this skill also instructs users to install and run packages from the network in order to complete tasks.
This duplicate finding points to the same persistence behavior: unpacking executables into a user-controlled directory and prepending that directory to PATH. In the context of a user-invocable skill that may auto-bootstrap dependencies, persistence increases blast radius because it affects later sessions and may mask the system's normal toolchain.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same persistence behavior: unpacking executables into a user-controlled directory and prepending that directory to PATH. In the context of a user-invocable skill that may auto-bootstrap dependencies, persistence increases blast radius because it affects later sessions and may mask the system's normal toolchain.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
L60 instructs operators that the skill must use the domestic 'cn' site and says to override 'intl' configuration unless the user explicitly says they use an international account. This imposes a locale/site constraint by default rather than offering user choice or opt-in.
The activation guidance defines examples for extraction, variation, and mockup generation, but it does not clearly separate when a full end-to-end workflow should run versus when the user is only asking for advice or planning. That ambiguity can lead to over-execution and unnecessary exposure of local files or external API credentials.