linkpix-gpt-image-2
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads Node.js binaries and checksum files from the official
nodejs.orgdistribution server to configure the local environment. The skill follows security best practices by verifying the download integrity usingsha256sumbefore extraction. - [EXTERNAL_DOWNLOADS]: Installs the
@iqinghu/qhkitpackage from the NPM registry, which is the primary tool for the skill's functionality. It also manages dependencies likepillow(Python) andsharp-cli(Node.js) for image manipulation. - [COMMAND_EXECUTION]: Executes shell commands to install software, configure environment variables, and invoke the
qhkitutility. It also utilizes inline Python and Node.js scripts for local image processing and compression when file sizes exceed limits. - [PERSISTENCE]: Instructions include appending the Node.js binary path to
~/.bashrcto ensure the tool remains accessible in future terminal sessions, which is a standard environment configuration step.
Audit Metadata