Security audit
Security checks for vulnerabilities and agentic risk
The skill performs a coherent Shopee product lookup, but it also directs broad host setup, unpinned package installation or upgrades, and credential configuration that users should review before installing.
Install only if you are comfortable letting this skill add or upgrade qhkit/Node tooling and configure a Qinghu API token on the host. Prefer a preinstalled, pinned qhkit version and provide credentials through your normal secret-management flow rather than letting the skill bootstrap or overwrite environment settings automatically.
The skill goes far beyond querying shop products and contains extensive environment bootstrapping, package installation, Node runtime setup, upgrade paths, and host-level troubleshooting steps. This expands the attack surface substantially by encouraging software installation and system modification on the host in response to ordinary user requests.
The skill instructs use of npx @iqinghu/qhkit without pinning a specific version, which makes execution depend on whatever package version is current at runtime. That creates a supply-chain risk and reduces reproducibility, especially because the skill also recommends installation and execution on the host for a relatively narrow data-query task.
This duplicate finding points to the same persistence behavior: writing a runtime under $HOME/.local/lib and exporting a modified PATH. Such instructions are inappropriate in a narrow query skill because they normalize persistent host modification and can affect later commands and sessions.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding points to the same persistence behavior: writing a runtime under $HOME/.local/lib and exporting a modified PATH. Such instructions are inappropriate in a narrow query skill because they normalize persistent host modification and can affect later commands and sessions.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The skill explicitly directs the agent/user to access API keys, environment configuration, and token setup on the host, including modifying QHKIT_TOKEN and related settings. For a shop-product lookup skill, this is over-privileged behavior that can expose or alter sensitive credentials and encourages interaction with secrets outside the minimum necessary scope.
No suspicious patterns detected.