Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Shopee analytics integration that installs and configures its required qhkit CLI, but users should review the setup steps before allowing persistent local changes.
Install only if you are comfortable allowing the agent to install qhkit or Node, make network calls to Qinghu and package registries, and store a qhkit API token locally. Confirm the Qinghu site/account region before changing configuration, and approve paid qhkit calls only after reviewing the estimated credit cost.
This analytics skill contains extensive host bootstrap instructions, including installing Node.js, globally installing packages, and modifying PATH, which exceeds the minimum privileges needed for a brand-category lookup. Such instructions normalize broad system changes and increase the chance an agent will perform unnecessary code execution and persistence on the host.
The phrase requiring the skill to trigger for 'similar needs' is overly broad and can cause the agent to invoke this skill outside its narrow intended scope. In context, over-triggering is more dangerous because the skill can initiate package installation, configuration changes, and paid external calls.
The skill recommends invoking an unpinned package via npx @iqinghu/qhkit, which allows execution of whatever version is current at runtime. That creates a supply-chain risk: a compromised latest release or dependency could execute arbitrary code in the host environment during a seemingly routine analytics task.
This is a duplicate report of the same persistence behavior: installing Node into a user directory and altering PATH for subsequent command execution. Even with checksum verification, persisting new executables for a narrow business query is an unnecessary expansion of host capabilities.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This is a duplicate report of the same persistence behavior: installing Node into a user directory and altering PATH for subsequent command execution. Even with checksum verification, persisting new executables for a narrow business query is an unnecessary expansion of host capabilities.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill instructs the agent to set API tokens in local config and environment variables, and to guide users through credential acquisition and environment switching. Handling secrets and persistent auth state is broader than the business purpose and can lead to credential exposure, accidental overwrite of existing configuration, or misuse of higher-privileged accounts.
该说明明确要求本技能对接国内版 iqinghu.com，且当检测到 intl 配置时，默认要求用户改回 cn 并覆盖现有设置。虽然文档提到“只有用户明确说自己用的是国际版账号时才保留 intl”，但默认行为仍是强制单一区域配置，而非先提供区域选择或确认。
该部分给出“这个品牌主要做哪些品类”“品牌产品线分布”两个说法，但没有说明是否需要限定 Shopee 场景、品牌维度、类目分布意图等条件。缺少约束和反例会让相近但不适用的普通分析请求误触发该技能。
No suspicious patterns detected.