The Agent Skills Directory

[PERSISTENCE]: The skill instructs the agent to modify shell configuration files (e.g., ~/.bashrc) to update the PATH environment variable. This is a persistence mechanism intended to ensure that manually installed Node.js binaries remain available in future sessions.\n- [EXTERNAL_DOWNLOADS]: The skill performs several external requests to well-known and vendor-owned sources:\n
Downloads Node.js binaries and checksum files from nodejs.org (a well-known official source).\n
Downloads Node.js binaries from npmmirror.com (a well-known mirror service).\n
Installs the @iqinghu/qhkit package from the NPM registry, which is associated with the skill's vendor (iqinghu.com).\n- [COMMAND_EXECUTION]: The skill heavily utilizes shell commands for both setup and operation, including curl for network requests, tar for binary extraction, and npm for package management.\n- [INDIRECT_PROMPT_INJECTION]: The skill interpolates user-provided image prompts and file paths directly into shell command arguments, creating an attack surface for indirect injection.\n
Ingestion points: User-provided prompt and uploadedImages fields processed in SKILL.md.\n
Boundary markers: Absent; although the skill suggests using JSON files for parameters to mitigate shell escaping issues, it does not enforce boundaries for direct string interpolation.\n
Capability inventory: The skill has access to network tools (curl), file system manipulation (tar, mkdir), and package management (npm).\n
Sanitization: No explicit sanitization is performed on user-supplied strings before they are placed in command arguments.\n- [PRIVILEGE_ESCALATION]: The skill suggests performing global package installations (npm i -g) and manual system PATH modifications, which involve high-privilege environment changes.

linkpix-background-swap