linkpix-minimax-h3-clone

Fail

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: HIGHPERSISTENCECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes numerous shell commands to manage environment setup, software installation, and task execution. This includes using npm for package management, curl and tar for binary distribution, and qhkit for vendor-specific operations.
  • [PERSISTENCE]: Instructions direct the agent to modify the user's shell profile (~/.bashrc) by appending path exports. This mechanism ensures that the installed Node.js runtime and associated tools remain accessible across different sessions.
  • [EXTERNAL_DOWNLOADS]: The skill downloads Node.js binaries and checksums from nodejs.org and installs the @iqinghu/qhkit package from the npm registry. It also suggests using mirrors such as npmmirror.com and tsinghua.edu.cn for localized access. These sources are recognized as well-known distribution services.
  • [DYNAMIC_EXECUTION]: The skill generates and executes Python and Node.js one-liner scripts at runtime to handle image compression when input files exceed the 10MB limit. These scripts use libraries like Pillow or sharp-cli to resize and re-encode images.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external video sharing URLs (e.g., from Douyin or TikTok) provided by the user. These URLs are passed to the video-inspire tool to extract scripts, creating a surface where malicious content in the source video metadata could influence agent behavior. Boundary markers are partially implemented via JSON parameter encapsulation.
Recommendations
  • HIGH: Downloads and executes remote code from: https://nodejs.org/dist/v22.22.3/SHASUMS256.txt - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 21, 2026, 04:09 PM