qinghu-1688-image-search
Fail
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: HIGHPERSISTENCEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PERSISTENCE]: Instructions in SKILL.md guide the agent to modify shell profiles such as ~/.bashrc to ensure the PATH variable persists across sessions.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data. Ingestion points: image_url parameter and search results returned from the 1688 platform. Boundary markers: None identified. Capability inventory: Executes qhkit shell commands, writes to files (@params.json, result.json), and modifies environment variables. Sanitization: No explicit sanitization of the external content is mentioned.- [EXTERNAL_DOWNLOADS]: Fetches configuration and binary files from external sources. Downloads Node.js binaries and checksum files from nodejs.org. Downloads the @iqinghu/qhkit package from the official npm registry or a well-known mirror (npmmirror.com). These are recognized as trusted or well-known sources.- [COMMAND_EXECUTION]: The skill performs multiple system operations including archive extraction (tar), network requests (curl), and shell command execution for the qhkit utility.
Recommendations
- HIGH: Downloads and executes remote code from: https://nodejs.org/dist/v22.22.3/SHASUMS256.txt - DO NOT USE without thorough review
Audit Metadata