Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent Qinghu/QHKit integration for generating e-commerce scripts, with disclosed external service use and installation steps, but users should understand the package install, token setup, and regional service routing before using it.
Install this only if you are comfortable using Qinghu/QHKit as an external service for product images, product details, and competitor video links. Review the npm package source you trust, avoid adding shell-startup PATH changes unless needed, and use the China or international account configuration intentionally.
The trigger conditions are broad and mandatory, causing this skill to activate for many common writing requests involving scripts or copy. Over-broad auto-invocation can push users into unnecessary external tool use, increasing data exposure and making it easier to route unrelated prompts through a third-party service without clear user consent.
The skill instructs use of npx @iqinghu/qhkit without pinning a specific version, which makes execution depend on whatever package version is current at invocation time. That creates a supply-chain risk: a compromised or breaking upstream release could be fetched and executed automatically in the user's environment.
The duplicated finding points to the same persistent installation flow that places Node under the user's home directory and alters command resolution through PATH. That kind of session persistence is risky in an agent skill because it changes the host environment beyond the immediate task and can facilitate later unintended code execution via the newly installed toolchain.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The duplicated finding points to the same persistent installation flow that places Node under the user's home directory and alters command resolution through PATH. That kind of session persistence is risky in an agent skill because it changes the host environment beyond the immediate task and can facilitate later unintended code execution via the newly installed toolchain.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill strongly enforces use of the China-site configuration (site must be cn) and directs users to obtain domestic credentials unless they explicitly insist otherwise. This creates a locale and data-governance risk because users may be steered to a region-specific service and token flow without an upfront opt-in about jurisdiction, privacy, and account context.