Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Qique employee assistant for local CRM access, with sensitive browser and CRM permissions called out and constrained by employee/admin controls.
Install only if you use Qique and understand that the separate official runtime and Chrome extension can access browser/CRM context. Verify the downloaded package hashes, inspect the extension manifest, avoid sharing cookies or tokens in chat, and keep high-impact operations limited to the documented human-confirmed flows.
The README instructs users to run npx skills add Edmon/qique-employee without pinning a specific package version, which can cause execution of whatever version is current at install time. In a security-sensitive workflow involving local MCP setup and access to clinic CRM data, this increases supply-chain risk if the package is updated maliciously or unexpectedly.
The command npx skills add Edmon/qique-employee --list still relies on an unpinned npx skills package, so even a supposedly non-installing discovery step may execute an untrusted latest version. Because this skill is for employee use with local MCP and business/customer access, normalizing unpinned command execution raises avoidable supply-chain exposure.
Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface.
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
This plain-text file presents the licensing notice exclusively in Chinese. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is documented and justified, which is not present here.
The primary heading and most of the usage instructions are written in Chinese, with only limited English support. Under the policy criteria, a skill should not impose a language/locale without user opt-in unless the constraint is clearly justified as region-specific.
This manifest is a JSON file, so SQP-3 applies. The only distribution URLs use the qique.cn domain, which may imply a region- or locale-specific distribution path, but the file provides no natural-language explanation of any regional limitation or user choice; line L18 discusses licensing and compatibility, not locale justification.
No suspicious patterns detected.