linkpix-wildberries-image
Fail
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: HIGHPERSISTENCEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill instructs the agent to modify the user's shell profile (~/.bashrc) to ensure the Node.js binary path persists across different sessions.
- [EXTERNAL_DOWNLOADS]: The skill fetches the Node.js runtime from nodejs.org and the qhkit utility from the official NPM registry or a trusted mirror (npmmirror.com). These downloads are performed from well-known services and include integrity verification using sha256sum.
- [DYNAMIC_EXECUTION]: The skill utilizes dynamic Python and Node.js execution (via 'python -c' and 'npx') to perform local image processing and compression tasks at runtime.
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: User-provided descriptions, prompts, and custom text for images are processed in SKILL.md. 2. Boundary markers: The skill recommends passing parameters via a JSON file (@params.json) to mitigate shell-level command injection. 3. Capability inventory: The skill can execute shell commands via qhkit, write to the local filesystem during image compression, and perform network requests to the vendor's image generation API. 4. Sanitization: While the skill suggests structured data passing, user-provided content is interpolated into generated command strings without explicit sanitization mechanisms.
Recommendations
- HIGH: Downloads and executes remote code from: https://nodejs.org/dist/v22.22.3/SHASUMS256.txt - DO NOT USE without thorough review
Audit Metadata