Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently guides an agent to use Qinghu's Shopee market-data API for cross-site expansion analysis, with disclosed API use, cost confirmation, and local export behavior.
Before installing, expect the skill to use a Qinghu API key, call Qinghu's external API, potentially consume Qinghu credits after your confirmation, and export larger result sets to local files. Do not install it if you do not want an agent using QINGHU_TOKEN or QHKIT_TOKEN from the environment or retaining exported market-data files locally.
The skill explicitly instructs the agent to read API credentials from environment variables (QINGHU_TOKEN / QHKIT_TOKEN) without requiring explicit user consent or warning that sensitive secrets may be accessed from the runtime. In an agent setting, this can cause unintended secret use or disclosure, especially if the user did not intend the skill to consume ambient credentials.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
| `queryshopeebrandsitedistribute` | 查品牌站点分布 | 同一品牌在各站点的分布（跨站点决策核心，只需 brandName + timest） |
| `queryshopeebranddata` | 查品牌列表 | 某站点下的品牌盘子 |
| `queryshopeebranddetailbatch` | 查品牌详情 | 批量看品牌的量级 |
| `queryshopeebrandshoplist` | 查品牌店铺列表 | 该品牌在站点里由哪些店在卖 |
| `queryshopeebranditemlist` | 查品牌产品列表 | 该品牌的在售商品与表现 |
| `queryshopeebrandtrenddetail` | 查品牌趋势 | 品牌在多站点的走势对比（支持 sites） |
| `queryshopeesitedate` | 查站点数据 | 各站点大盘作为基准 |
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
| `queryshopeebrandsitedistribute` | 查品牌站点分布 | 同一品牌在各站点的分布（跨站点决策核心，只需 brandName + timest） |
| `queryshopeebranddata` | 查品牌列表 | 某站点下的品牌盘子 |
| `queryshopeebranddetailbatch` | 查品牌详情 | 批量看品牌的量级 |
| `queryshopeebrandshoplist` | 查品牌店铺列表 | 该品牌在站点里由哪些店在卖 |
| `queryshopeebranditemlist` | 查品牌产品列表 | 该品牌的在售商品与表现 |
| `queryshopeebrandtrenddetail` | 查品牌趋势 | 品牌在多站点的走势对比（支持 sites） |
| `queryshopeesitedate` | 查站点数据 | 各站点大盘作为基准 |
The skill mandates automatic export of returned records to files and reuse of cached local file paths without informing the user that data will be written to disk. Writing potentially sensitive business data to local storage increases the risk of unintended persistence, later cross-session exposure, or access by other tools/processes on the host.
L134-L140 require the output to include site-specific language guidance, but the skill as a whole is written to operate in Chinese and does not state that users may choose their preferred response language. This can create a locale/language policy issue if the skill effectively forces a specific language context without opt-in.