linkpix-gpt-image-2

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads Node.js binaries and checksum files from the official nodejs.org distribution server to configure the local environment. The skill follows security best practices by verifying the download integrity using sha256sum before extraction.
  • [EXTERNAL_DOWNLOADS]: Installs the @iqinghu/qhkit package from the NPM registry, which is the primary tool for the skill's functionality. It also manages dependencies like pillow (Python) and sharp-cli (Node.js) for image manipulation.
  • [COMMAND_EXECUTION]: Executes shell commands to install software, configure environment variables, and invoke the qhkit utility. It also utilizes inline Python and Node.js scripts for local image processing and compression when file sizes exceed limits.
  • [PERSISTENCE]: Instructions include appending the Node.js binary path to ~/.bashrc to ensure the tool remains accessible in future terminal sessions, which is a standard environment configuration step.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 04:09 PM