linkpix-kling-3-sales
Fail
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands such as
curl,tar, andnpmto manage environment configuration and install necessary tooling. - [EXTERNAL_DOWNLOADS]: Fetches Node.js binaries and verification checksums from the official
nodejs.orgdistribution service. It also installs the@iqinghu/qhkitpackage from the npm registry. - [DYNAMIC_EXECUTION]: The skill instructs the agent to generate and execute inline scripts at runtime to handle image resizing tasks. This includes using
python -cfor processing with the Pillow library andnpxto run thesharp-cliutility. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided prompts and images which are then passed to external CLI tools for processing.
- Ingestion points: User-supplied
promptanduploadedImagesfields as described inSKILL.md. - Boundary markers: None explicitly defined for user prompts; data is encapsulated in JSON objects passed to CLI commands.
- Capability inventory: Includes shell command execution, file system interaction (reading/writing images), and network operations via the
qhkittool. - Sanitization: No specific input sanitization or validation logic is provided for user-generated content.
- [CREDENTIALS_UNSAFE]: The instructions guide the agent to request an API token from the user and configure it using the
qhkit config set --tokencommand.
Recommendations
- HIGH: Downloads and executes remote code from: https://nodejs.org/dist/v22.22.3/SHASUMS256.txt - DO NOT USE without thorough review
Audit Metadata