linkpix-pinduoduo-image
Fail
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Downloads and installs executable content from external sources.
- Fetches Node.js binaries from
nodejs.organd installs them to the user's local directory. - Uses
npmandnpxto install and execute packages like@iqinghu/qhkitandsharp-cli. - [PERSISTENCE]: Attempts to modify shell configuration files to maintain environment changes.
- Recommends appending the Node.js binary path to
~/.bashrcto ensure the runtime remains available across shell sessions. - [COMMAND_EXECUTION]: Executes multiple shell commands to manage files and run core logic.
- Extensive usage of
qhkit,tar,mkdir, andnpmfor environment setup and tool execution. - [DYNAMIC_EXECUTION]: Generates and executes scripts at runtime for utility tasks.
- Instructs the agent to generate and run on-the-fly Python or Node.js scripts for image processing tasks when file size limits are exceeded.
- [INDIRECT_PROMPT_INJECTION]: Ingests untrusted external data that influences AI model behavior.
- Processes user-provided images and text strings (
customCopy) which are passed to the backend AIGC models, presenting a surface for indirect prompt injection. - [EXTERNAL_DOWNLOADS]: Downloads software and configuration from remote registries.
- Accesses
nodejs.organdnpmjs.com(including mirrors likenpmmirror.com) for runtime and dependency installation.
Recommendations
- HIGH: Downloads and executes remote code from: https://nodejs.org/dist/v22.22.3/SHASUMS256.txt - DO NOT USE without thorough review
Audit Metadata