qinghu-door-outfit-change
Fail
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads Node.js runtime binaries and integrity checksums from the official nodejs.org site and installs the @iqinghu/qhkit package from the npm registry or its official mirror. These are well-known technology services and repositories.
- [COMMAND_EXECUTION]: Executes several shell commands including curl, tar, npm, and the qhkit CLI tool to manage installation and execute video generation workflows.
- [PERSISTENCE]: Instructions suggest appending environment variable exports to shell profile files such as ~/.bashrc to ensure the Node.js installation remains in the system path across sessions.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted data from the user to populate generation parameters. 1. Ingestion points: fields in the params.json file (SKILL.md). 2. Boundary markers: Uses JSON structure as a boundary for input data. 3. Capability inventory: Execution of shell commands via qhkit, npm, and curl (SKILL.md). 4. Sanitization: No explicit sanitization or validation logic is defined in the instructions; the skill relies on the underlying CLI tool to handle inputs safely.
Recommendations
- HIGH: Downloads and executes remote code from: https://nodejs.org/dist/v22.22.3/SHASUMS256.txt - DO NOT USE without thorough review
Audit Metadata