linkpix-pod-assets
Fail
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: HIGHPERSISTENCECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill suggests modifying shell profile files (e.g., ~/.bashrc) to append path configuration for the installed Node.js binary, ensuring the utility remains available in future sessions.
- [COMMAND_EXECUTION]: The skill performs shell-based installation and configuration tasks, including package management with npm and binary extraction. Automated alerts regarding remote code execution via piping are confirmed false positives; the script pipes to grep and sha256sum for file integrity verification rather than a shell.
- [EXTERNAL_DOWNLOADS]: Fetches the Node.js runtime and checksum files from official distributions at nodejs.org and installs packages from the npm registry. These are well-known official sources used for legitimate dependency management.
- [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface where user-provided images and design prompts are passed to the qhkit CLI.
- Ingestion points: Input images and prompt parameters in the qhkit image generate command within SKILL.md.
- Boundary markers: None identified; untrusted data is directly interpolated into command arguments.
- Capability inventory: The skill executes the qhkit binary and performs network operations for image generation via the CLI.
- Sanitization: No input sanitization or validation of the processed assets is implemented.
Recommendations
- HIGH: Downloads and executes remote code from: https://nodejs.org/dist/v22.22.3/SHASUMS256.txt - DO NOT USE without thorough review
Audit Metadata