Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent marketing-image generation helper, with disclosed qhkit installation, token setup, and image-generation workflows.
Before installing, confirm you are comfortable installing the qhkit npm CLI and possibly Node, configuring a qhkit token, and sending referenced product images or prompts to the qinghu service for generation. Prefer existing Node/npm where available, review any global install or PATH changes, and avoid providing sensitive product images unless the service is appropriate for that data.
The manifest says the skill 'must trigger' whenever a user asks to make promotional posters, activity images, discount images, holiday marketing images, or major-sale assets. These phrases are broad and likely to overlap with ordinary user requests, and the file does not provide negative examples or clear boundaries for when the skill should not activate.
npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.
The documented bootstrap flow leaves software installed under the user's home directory and changes command resolution via PATH. In agent environments, that persistence can outlive the original task and influence unrelated future operations, increasing the blast radius if the installed tool is later compromised or misused.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The documented bootstrap flow leaves software installed under the user's home directory and changes command resolution via PATH. In agent environments, that persistence can outlive the original task and influence unrelated future operations, increasing the blast radius if the installed tool is later compromised or misused.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The file directs the agent to require the 'cn' site and to send users the domestic iqinghu.com key-acquisition flow, only preserving the international configuration if the user explicitly says they use AutoAGC. This imposes a locale/service choice by default rather than offering the user a language/region option up front.
The markdown lists only a couple of example utterances such as making a Double 11/Black Friday/Christmas poster or a new-product launch image, but it does not state what similar requests should be excluded. Without constraints or counterexamples, the activation boundary remains ambiguous.