linkpix-main-image-clone
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides automated shell commands to download Node.js binaries and checksum files directly from the official distribution servers at nodejs.org.
- [COMMAND_EXECUTION]: Executes various shell commands to install the '@iqinghu/qhkit' npm package, manage environment variables (PATH), and configure the tool using 'qhkit config set'. The automated detection of piped shell execution is a false positive; the command is actually piped to 'sha256sum' for integrity verification, ensuring the downloaded binary matches the official hash before extraction.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Untrusted user inputs, including image file paths ('uploadedImages') and style descriptions ('prompt'), are interpolated into shell commands in 'SKILL.md'.
- Boundary markers: Absent; there are no delimiters separating user-provided data from the command structure.
- Capability inventory: The skill triggers image generation via the 'qhkit' CLI, which may process external content.
- Sanitization: No validation or escaping is performed on the user-provided inputs before they are passed to the shell.
Audit Metadata