linkpix-image-text-edit
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads Node.js binaries from the official nodejs.org website and the @iqinghu/qhkit package from the standard NPM registry or a well-known mirror (npmmirror.com). All sources are official or vendor-controlled.
- [COMMAND_EXECUTION]: The skill provides shell commands for extraction and installation. It notably includes a validation step that uses sha256sum to verify the integrity of the downloaded Node.js binary against official checksums.
- [PERSISTENCE]: To maintain functionality, the skill suggests adding the tool's binary path to the shell profile (~/.bashrc), which is a conventional method for ensuring tool availability in automated environments.
- [SAFE]: No malicious patterns or unauthorized data access were detected. The skill uses secure installation practices and authentic vendor resources.
Audit Metadata