Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent video-generation helper that discloses its external service, uploads, paid-credit flow, and setup steps, with some normal dependency and credential-handling caution.
Before installing, confirm you are comfortable using the qhkit/iqinghu service, storing or providing an API token, and uploading the selected video and model image to that service. Review the credit estimate before approving generation, and prefer an already-installed or trusted package manager installation over ad hoc npx use when possible.
The trigger phrase “女模特换一下” is very short and ambiguous, and could match many general editing or creative requests unrelated to this specific qhkit workflow. The file does not give clear exclusion conditions around when this phrase should not activate the skill, increasing the risk of unintended invocation.
The calling contract mandates use of Chinese field names and Chinese option names, and the surrounding instructions are written as fixed Chinese-only operational requirements. There is no indication that the user can opt into another language or locale, which may violate language or locale choice policy unless the regional restriction is explicitly justified.
The skill instructs use of npx @iqinghu/qhkit without pinning a specific version, which makes execution dependent on whatever package version is current at runtime. That creates a supply-chain risk: a compromised or breaking upstream release could be fetched and executed automatically in the user's environment.
This duplicate finding reflects the same issue: the skill recommends installing software into a user-controlled directory and adjusting PATH, potentially across future sessions. While the checksum step reduces tampering risk during download, the long-lived environment modification still expands the attack surface and persists beyond the skill's immediate purpose.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"
This duplicate finding reflects the same issue: the skill recommends installing software into a user-controlled directory and adjusting PATH, potentially across future sessions. While the checksum step reduces tampering risk during download, the long-lived environment modification still expands the attack surface and persists beyond the skill's immediate purpose.
cd /tmp && curl -fsSLO https://nodejs.org/dist/v22.22.3/node-v22.22.3-linux-x64.tar.xz cd /tmp && curl -fsSL https://nodejs.org/dist/v22.22.3/SHASUMS256.txt | grep ' node-v22.22.3-linux-x64.tar.xz$' | sha256sum -c - mkdir -p "$HOME/.local/lib" && tar -xJf /tmp/node-v22.22.3-linux-x64.tar.xz -C "$HOME/.local/lib" export PATH="$HOME/.local/lib/node-v22.22.3-linux-x64/bin:$PATH"