linkpix-pinduoduo-image

Fail

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: Downloads and installs executable content from external sources.
  • Fetches Node.js binaries from nodejs.org and installs them to the user's local directory.
  • Uses npm and npx to install and execute packages like @iqinghu/qhkit and sharp-cli.
  • [PERSISTENCE]: Attempts to modify shell configuration files to maintain environment changes.
  • Recommends appending the Node.js binary path to ~/.bashrc to ensure the runtime remains available across shell sessions.
  • [COMMAND_EXECUTION]: Executes multiple shell commands to manage files and run core logic.
  • Extensive usage of qhkit, tar, mkdir, and npm for environment setup and tool execution.
  • [DYNAMIC_EXECUTION]: Generates and executes scripts at runtime for utility tasks.
  • Instructs the agent to generate and run on-the-fly Python or Node.js scripts for image processing tasks when file size limits are exceeded.
  • [INDIRECT_PROMPT_INJECTION]: Ingests untrusted external data that influences AI model behavior.
  • Processes user-provided images and text strings (customCopy) which are passed to the backend AIGC models, presenting a surface for indirect prompt injection.
  • [EXTERNAL_DOWNLOADS]: Downloads software and configuration from remote registries.
  • Accesses nodejs.org and npmjs.com (including mirrors like npmmirror.com) for runtime and dependency installation.
Recommendations
  • HIGH: Downloads and executes remote code from: https://nodejs.org/dist/v22.22.3/SHASUMS256.txt - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 21, 2026, 04:09 PM