Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
L03 将触发条件描述为“当用户要求提取印花、抠图案、把衣服上的图案拿出来、图案素材化时必须触发”，并附带较宽泛关键词列表，但没有说明不适用场景或负例。像“抠图案”“图案素材化”这类说法在日常图像编辑语境中较常见，容易与其他抠图、修图、设计类请求重叠。
- Content
Security audit
电商印花提取 | 图案提取 | POD印花 | 高清印花 | 青虎AI
Security checks for vulnerabilities and agentic risk
Overview
This skill is a disclosed image-processing integration that installs and uses qhkit to upload user-selected images for POD pattern extraction, with manageable setup and supply-chain considerations.
Before installing, expect this skill to install or run the qhkit npm package, require a Qinghu API token, and upload the image paths you provide to the Qinghu service for generation. Prefer a reviewed or pinned qhkit version in sensitive environments, and avoid adding PATH changes to shell startup files unless you want the Node install to persist across sessions.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Vulnerability Patterns
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Rogue AgentSelf-Modification, Session Persistence
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (5)
Rp1
Medium
- Category
- MCP Rug Pull
- Confidence
- 89% confidence
- Finding
The skill instructs falling back to
npx @iqinghu/qhkit <命令> ...without pinning a specific version. That causes runtime retrieval of whatever package version is current at execution time, increasing supply-chain risk and reducing reproducibility if a compromised, malicious, or breaking release is published.- Content
Session Persistence
Medium
- Category
- Rogue Agent
- Confidence
- 86% confidence
- Finding
This duplicate finding points to the same persistent installation and PATH-modification behavior. In an agent setting, changing the user environment for future shells is risky because it alters system state beyond the requested image-processing task and may introduce hard-to-audit execution paths later.
- Content
Linux 二进制安装（装到用户目录，无需 root；先校验官方 SHA256 再解包）：
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
text
Session Persistence
Medium
- Category
- Rogue Agent
- Confidence
- 86% confidence
- Finding
This duplicate finding points to the same persistent installation and PATH-modification behavior. In an agent setting, changing the user environment for future shells is risky because it alters system state beyond the requested image-processing task and may introduce hard-to-audit execution paths later.
- Content
Linux 二进制安装(装到用户目录,无需 root;先校验官方 SHA256 再解包):
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
text
Vague Triggers
Low
- Category
- Not specified by scanner
- Confidence
- 84% confidence
- Finding
L13-L16 仅给出两个正向示例，其中“这个图案帮我素材化”较为泛化，且“POD 设计需要复用现有图案时”并非可操作的精确触发语句。缺少反例或约束条件会让调用方难以判断何时不应调用该技能。
- Content