The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: Fetches Node.js binaries from official Node.js servers (nodejs.org). The instructions include a robust integrity check using SHA256 checksums to verify the downloaded files before extraction, which is a standard security best practice.
[EXTERNAL_DOWNLOADS]: Installs the @iqinghu/qhkit package from the npm registry or a well-known mirror (registry.npmmirror.com). This package is the core tool provided by the vendor for the skill's primary functionality.
[COMMAND_EXECUTION]: Invokes the qhkit CLI tool to perform video generation and configuration tasks. The skill provides clear guidance on installation, including methods to install the tool within the user's local directory to avoid the need for elevated privileges (sudo).
[INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied product descriptions and images. It employs structured JSON formatting for passing these inputs to the CLI tool, which helps establish a clear boundary between user data and command execution logic.
[PERSISTENCE]: Recommends updating the user's shell profile (~/.bashrc) to include the path for the newly installed Node.js binaries. This is a transparent and standard method for maintaining environment settings across sessions.

linkpix-video-ad-assets