Security audit
Security checks for vulnerabilities and agentic risk
This skill performs a narrow video-account ID conversion, but it also tells the agent to install unpinned external tooling and handle an API token in ways users should review first.
Install only if you are comfortable letting the agent install or update qhkit/Node and use a Qinghu API token for paid calls. Prefer a preinstalled, pinned qhkit version, avoid pasting tokens directly into logged command lines, and approve each paid lookup only after checking the stated tool and expected credit use.
The manifest description includes specific examples, but then expands activation to '同类需求时必须触发', which is ambiguous and lacks clear boundaries. This can cause unintended invocation for loosely related everyday requests about video accounts or IDs.
The skill goes beyond data lookup instructions and directs the agent to install Node.js, install npm packages globally, configure credentials, and modify execution environment state. Expanding a simple conversion skill into environment bootstrapping materially increases attack surface and the chance of unreviewed code execution, persistent system changes, and credential handling mistakes.
The skill instructs use of npx @iqinghu/qhkit without pinning a specific version, which can fetch and execute whatever the latest published package is at runtime. In a skill that is supposed to perform a narrow ID-conversion task, this creates unnecessary supply-chain risk because behavior can change over time and a compromised or malicious package update would be executed automatically.
This duplicate finding points to the same behavior: persisting a downloaded runtime under the user's home directory and altering command resolution for later commands. In the context of a narrow conversion skill, such persistence is unnecessary and increases long-term exposure if the installed runtime or subsequent packages are abused.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same behavior: persisting a downloaded runtime under the user's home directory and altering command resolution for later commands. In the context of a narrow conversion skill, such persistence is unnecessary and increases long-term exposure if the installed runtime or subsequent packages are abused.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill instructs setting an API token directly on the command line via qhkit config set --token <密钥> without warning that command-line arguments may be captured in shell history, process listings, logs, telemetry, or transcripts. This creates a realistic credential exposure path, especially in shared or monitored environments, and the token then enables access to paid external services.
No suspicious patterns detected.