Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Qinghu/Shopee data-query helper, with expected CLI setup and account configuration steps but no evidence of hidden or malicious behavior.
Before installing, confirm you intend to use the Qinghu domestic service and are comfortable installing qhkit/Node locally and providing a Qinghu API token. Approve paid qhkit calls only after checking the estimated credits, and consider pinning qhkit versions for reproducible or enterprise environments.
The description and invocation guidance are entirely in Chinese and require triggering on Chinese-language examples, with no indication that users may choose another language or locale. This can violate language/locale policy when a skill implicitly forces one language without opt-in.
The skill instructs use of npx @iqinghu/qhkit without pinning an exact package version, which makes execution depend on whatever version is current at install time. That creates a supply-chain risk: a compromised or breaking upstream release could be fetched and executed in the user environment during normal skill use.
This duplicated finding points to the same persistent installation workflow: downloading binaries, unpacking them into a user directory, and updating PATH for future use. Even with checksum verification, persistent toolchain modification is risky in a skill because it normalizes environment mutation and can be abused if users or agents follow it automatically.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicated finding points to the same persistent installation workflow: downloading binaries, unpacking them into a user directory, and updating PATH for future use. Even with checksum verification, persistent toolchain modification is risky in a skill because it normalizes environment mutation and can be abused if users or agents follow it automatically.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This instruction mandates a specific regional site and account flow (cn/iqinghu.com) by default and only preserves intl in a narrow exception. That is a locale-specific policy choice presented as mandatory behavior rather than an explicit user-selected option.
No suspicious patterns detected.