linkpix-main-image-optimize
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads Node.js binaries from nodejs.org and the @iqinghu/qhkit package from the npm registry. These are official or well-known sources associated with the vendor.\n- [COMMAND_EXECUTION]: Environment setup involves executing shell commands for downloading, extracting, and verifying software packages. The commands include integrity checks using sha256sum to ensure the downloaded binary matches the official hash.\n- [PERSISTENCE]: The instructions suggest modifying ~/.bashrc to ensure the Node.js path is preserved across shell sessions, allowing the agent to use the installed tools consistently.\n- [CREDENTIALS_UNSAFE]: The skill requires an API token but follows best practices by instructing the user to obtain and provide it via environment variables rather than hardcoding it in the skill files.
Audit Metadata