linkpix-image-variations
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches Node.js binaries and their corresponding SHA256 checksums from the official nodejs.org website to ensure environment compatibility. It also installs the @iqinghu/qhkit package from the public npm registry.
- [COMMAND_EXECUTION]: Utilizes shell commands to install the LinkPix CLI, verify downloaded file integrity using sha256sum, and perform image generation tasks. The automated scan's alert regarding piped execution refers to a security best practice where checksums are verified before installation, rather than execution of untrusted code.
- [PERSISTENCE]: Contains instructions to update the user's PATH variable by appending to the ~/.bashrc file. This is intended to ensure the node and qhkit binaries are available in subsequent shell sessions for the tool to function correctly.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided text prompts and local image file paths to generate image variations, creating a potential attack surface for indirect injection via processed data.
- Ingestion points: User prompts and local image file paths defined in SKILL.md.
- Boundary markers: Uses JSON-structured parameters to pass data to the qhkit CLI tool to maintain data integrity.
- Capability inventory: Includes file read access for local images, network access for uploading assets to the vendor's API, and command execution for the CLI tool.
- Sanitization: Relies on the downstream generative model's safety filters and CLI input validation.
Audit Metadata