linkpix-minimax-h3-clone
Fail
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: HIGHPERSISTENCECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes numerous shell commands to manage environment setup, software installation, and task execution. This includes using
npmfor package management,curlandtarfor binary distribution, andqhkitfor vendor-specific operations. - [PERSISTENCE]: Instructions direct the agent to modify the user's shell profile (
~/.bashrc) by appending path exports. This mechanism ensures that the installed Node.js runtime and associated tools remain accessible across different sessions. - [EXTERNAL_DOWNLOADS]: The skill downloads Node.js binaries and checksums from
nodejs.organd installs the@iqinghu/qhkitpackage from the npm registry. It also suggests using mirrors such asnpmmirror.comandtsinghua.edu.cnfor localized access. These sources are recognized as well-known distribution services. - [DYNAMIC_EXECUTION]: The skill generates and executes Python and Node.js one-liner scripts at runtime to handle image compression when input files exceed the 10MB limit. These scripts use libraries like
Pilloworsharp-clito resize and re-encode images. - [INDIRECT_PROMPT_INJECTION]: The skill processes external video sharing URLs (e.g., from Douyin or TikTok) provided by the user. These URLs are passed to the
video-inspiretool to extract scripts, creating a surface where malicious content in the source video metadata could influence agent behavior. Boundary markers are partially implemented via JSON parameter encapsulation.
Recommendations
- HIGH: Downloads and executes remote code from: https://nodejs.org/dist/v22.22.3/SHASUMS256.txt - DO NOT USE without thorough review
Audit Metadata