Security audit
Security checks for vulnerabilities and agentic risk
The skill’s video-ad generation purpose is coherent, but it gives broad self-install and upgrade instructions that can persistently change the user environment without clear consent controls.
Review this skill before installing if you do not want agents to install or upgrade Node/npm tooling, run unpinned npx commands, store a QHKit token, upload local product images, or spend Qinghu credits. Prefer a preinstalled, pinned qhkit version and confirm costs before any generate command.
The description says this skill '必须触发' for broad categories like ad videos and social media video assets, creating an overly aggressive routing rule. In an agent setting, mandatory broad invocation can cause unintended tool use, external network calls, package installation, and billing actions for ordinary user requests that may not require this skill.
The skill instructs falling back to npx @iqinghu/qhkit <命令> ..., which fetches and executes a package at runtime without a pinned version. That creates a supply-chain risk: a compromised upstream package, malicious new release, or dependency takeover could lead to arbitrary code execution in the agent environment.
This duplicated finding points to the same persistent installation behavior: unpacking Node into a user directory and exporting a modified PATH, with nearby instructions encouraging persistence across sessions. In an agent context, persistent host changes expand the blast radius from a single run to future sessions and workflows.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicated finding points to the same persistent installation behavior: unpacking Node into a user directory and exporting a modified PATH, with nearby instructions encouraging persistence across sessions. In an agent context, persistent host changes expand the blast radius from a single run to future sessions and workflows.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
The "何时触发" section gives two example requests, including "给投放准备视频素材" and a general condition about producing multiple platform variants. This describes broad situations but does not clearly distinguish this skill from other video-generation skills, increasing the chance of overlapping or accidental activation.