Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Shopee trend-query integration, with some setup and credential-handling risks users should understand before use.
Install only if you are comfortable with qhkit, npm-based setup, and providing a Qinghu API token. Prefer a preinstalled or pinned qhkit version, review any npm or Node installation before allowing it, and approve paid calls because the skill can consume Qinghu credits.
The skill claims to only perform Shopee trend queries, but it also directs host-environment installation, configuration, and credential setup. This is a scope expansion that increases attack surface and can lead an agent to make host changes unrelated to the user-visible analytics task.
The documentation includes package installation, runtime setup, downloads, and PATH modification even though the stated purpose is category trend analysis. Those host-level actions create unnecessary execution and persistence paths that could be abused if the package source or instructions are compromised.
The skill instructs use of npx @iqinghu/qhkit without pinning a specific version. That can cause nondeterministic execution and supply-chain risk because a future or compromised package version could be fetched and run at invocation time.
This duplicate finding points to the same persistence behavior: unpacking software into the user's home directory and altering executable resolution. In the context of a data-query skill, such persistence is unnecessary and increases the blast radius of supply-chain or misuse scenarios.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same persistence behavior: unpacking software into the user's home directory and altering executable resolution. In the context of a data-query skill, such persistence is unnecessary and increases the blast radius of supply-chain or misuse scenarios.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill instructs the agent to set API tokens and environment variables on the host, which exceeds the stated analytics function and touches sensitive secret handling. This can expose credentials to logs, shell history, or unintended reuse by other processes and sessions.
No suspicious patterns detected.