Security audit
Security checks for vulnerabilities and agentic risk
The skill is for a legitimate paid TikTok product-live lookup, but it also tells the agent to make persistent local toolchain and credential setup changes without a clearly separate user-controlled setup flow.
Review this before installing if you do not want an agent to install Node/qhkit, alter PATH, or configure a qhkit token on your machine. The data lookup and paid-call consent flow are reasonably disclosed, but dependency installation and credential setup should be treated as a separate setup decision.
The skill goes well beyond querying a data source and instructs the agent to install Node.js, globally install packages, configure credentials, and troubleshoot environment state. This expands the attack surface substantially by encouraging software installation and persistent configuration changes in the host environment for a simple lookup task.
The skill instructs use of npx @iqinghu/qhkit without pinning a specific version, which makes execution depend on whatever package version is current at runtime. That creates a supply-chain risk and undermines reproducibility, especially because the package is then used to access tokens and paid remote APIs.
This duplicated finding identifies the same persistence behavior: installing software into a user-controlled directory and altering PATH for subsequent use. In context, the persistence is especially risky because the skill also handles token configuration and directs repeated CLI usage, increasing the chance that the installed tooling influences later sessions.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicated finding identifies the same persistence behavior: installing software into a user-controlled directory and altering PATH for subsequent use. In context, the persistence is especially risky because the skill also handles token configuration and directs repeated CLI usage, increasing the chance that the installed tooling influences later sessions.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The instructions explicitly require sending the domestic-site credential guidance text to the user, and that guidance is written only in Chinese. This imposes a specific language/locale on user-facing communication without offering a language choice or documenting a justified locale restriction for all users.
No suspicious patterns detected.