Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent product-mockup generator, but it relies on an external CLI/service and may install or update local Node/npm tooling.
Install only if you are comfortable using Qinghu/qhkit as an external image-generation service, providing its API token, uploading the images you use for mockups, and allowing npm/Node tooling changes on the machine. Prefer a preinstalled or pinned qhkit version when possible.
The description says the skill "must trigger" whenever the user asks to put a pattern on a product, make a mockup, or create a custom effect image, and then lists broad keywords. This can overlap with ordinary ecommerce or design discussions and does not provide negative examples or boundaries for when the skill should not activate.
The skill instructs fallback execution via npx @iqinghu/qhkit <命令> ... without pinning an exact package version. That can cause the agent to fetch and execute whatever version is current at runtime, increasing supply-chain risk and making behavior non-reproducible if the upstream package is compromised or changes unexpectedly.
This duplicate finding points to the same behavior: unpacking Node under the user's home directory and modifying PATH, with mention of adding it to ~/.bashrc for reuse. In an agent skill, that crosses from transient task execution into persistence, which can alter future sessions and widen the blast radius if the installed toolchain is later abused.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same behavior: unpacking Node under the user's home directory and modifying PATH, with mention of adding it to ~/.bashrc for reuse. In an agent skill, that crosses from transient task execution into persistence, which can alter future sessions and widen the blast radius if the installed toolchain is later abused.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The "何时触发" section provides only two positive examples, including a broad business scenario about needing showcase images, but no constraints or negative examples. Without clearer boundaries, the skill may activate on loosely related merchandising conversations rather than only on concrete mockup-generation requests.