linkpix-taobao-tmall-image
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Node.js runtime and the qhkit utility from official repositories (nodejs.org and npmjs.com).
- [COMMAND_EXECUTION]: Runs shell commands to set up the environment and perform local image tasks using standard Python and Node.js libraries.
- [PERSISTENCE]: Recommends updating the PATH in the shell profile (~/.bashrc) for tool availability, a common setup step.
- [INDIRECT_PROMPT_INJECTION]: Processes user-provided images and text, creating an attack surface that is mitigated by the tool's focused AIGC functionality.
Audit Metadata