The Agent Skills Directory

[PERSISTENCE]: The instructions direct the agent to modify the user's shell profile file (~/.bashrc) to append a new directory to the system PATH. This is a persistence mechanism intended to ensure that the newly installed Node.js binaries remain available across different shell sessions.
[REMOTE_CODE_EXECUTION]: The skill provides automated environment bootstrapping logic that fetches Node.js binaries from official sources (nodejs.org) and installs the vendor's package (@iqinghu/qhkit). While these are recognized sources, the behavior of an agent autonomously downloading, verifying via checksum, and executing third-party binaries represents a significant execution risk.
[COMMAND_EXECUTION]: The skill's core functionality is implemented through shell commands (qhkit image generate). The agent is instructed to construct these commands using user-provided image paths and translation prompts, which could lead to command injection if the strings are not properly escaped.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect injection as it processes untrusted user data (images and prompt strings) and passes them to a shell-based processing tool.
Ingestion points: Untrusted data enters via the uploadedImages and prompt fields referenced in the qhkit commands.
Boundary markers: The instructions recommend wrapping arguments in a JSON string or using a separate .json file, which provides some structural separation but does not fully eliminate the risk of the agent misinterpreting instructions within the prompt.
Capability inventory: The skill has the capability to execute shell commands, read local files (images), and perform network operations via the qhkit utility.
Sanitization: There is no explicit requirement for the agent to sanitize or escape user-provided inputs before they are interpolated into the shell command string.
[EXTERNAL_DOWNLOADS]: The skill fetches resources from the Alibaba-maintained npm mirror (registry.npmmirror.com) as a fallback for the official registry, which is a common practice but remains an external dependency.

linkpix-image-translate