Security audit
Security checks for vulnerabilities and agentic risk
The skill’s Shopee data-query purpose is clear, but it tells the agent to install and configure runtime software with broad, persistent local changes.
Install only if you are comfortable with qhkit and Node/npm being installed or updated on your machine and with a Qinghu API token being configured locally. Prefer a pinned package version and an isolated environment, and approve paid qhkit calls only after reviewing the estimated credit cost.
The manifest says the skill "必须触发" when the user says two example phrases "或提出同类需求时", which leaves the activation boundary undefined. That broad wording can overlap with general product-research requests and cause unintended invocation because it does not clearly limit what counts as a matching request or provide exclusion examples.
The skill's stated purpose is querying Shopee hotword product lists, but it also contains broad environment-bootstrapping steps that direct the agent to install Node, install global packages, set credentials, and modify runtime configuration. Expanding from data retrieval into software installation and local environment setup materially increases attack surface and can lead to unauthorized changes or execution of untrusted code on the host.
The skill instructs use of npx @iqinghu/qhkit without pinning a specific version, which makes execution depend on whatever package version is current at install time. That creates a supply-chain risk: a compromised or breaking upstream release could be fetched and executed in the user's environment unexpectedly.
This duplicate finding points to the same persistent installation behavior: writing binaries under $HOME/.local/lib and altering PATH. Such session-to-session state changes are disproportionate to the skill's declared purpose and can influence later executions in ways the user may not expect.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same persistent installation behavior: writing binaries under $HOME/.local/lib and altering PATH. Such session-to-session state changes are disproportionate to the skill's declared purpose and can influence later executions in ways the user may not expect.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
No suspicious patterns detected.