linkpix-douyin-shop-image
Fail
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: HIGHPERSISTENCEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: Instructions direct the agent to append environment variable exports to
~/.bashrcto maintain the Node.js path across sessions. - [DYNAMIC_EXECUTION]: The skill uses
python -candnpxwith shell-interpolated strings to perform image compression and processing tasks. - [EXTERNAL_DOWNLOADS]: Fetches Node.js binaries from official sources (
nodejs.org) and downloads the vendor-specific CLI tool (@iqinghu/qhkit) from the NPM registry. - [COMMAND_EXECUTION]: Executes multiple shell commands for environment setup and tool operation, including
curl,tar,npm, andqhkit. - [INDIRECT_PROMPT_INJECTION]: The skill processes external image data and user-provided metadata, presenting a potential attack surface.
- Ingestion points:
uploadedImagesandcustomCopyparameters inSKILL.md. - Boundary markers: Parameters are structured within JSON blocks.
- Capability inventory: Shell execution of
qhkit,python,npx,curl,tar,npm, and file system access. - Sanitization: No specific shell-escaping or validation is described for inputs used in dynamic execution blocks.
Recommendations
- HIGH: Downloads and executes remote code from: https://nodejs.org/dist/v22.22.3/SHASUMS256.txt - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata