The Agent Skills Directory

[PERSISTENCE]: The skill instructs the agent to modify the ~/.bashrc file to update the PATH environment variable, ensuring the Node.js runtime is available in future sessions.
[EXTERNAL_DOWNLOADS]: The skill downloads the Node.js runtime from the official nodejs.org distribution site and installs the @iqinghu/qhkit package from the NPM registry. It also provides the option to use the npmmirror.com mirror as a fallback.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied image paths and prompts which are passed to the qhkit CLI tool.
Ingestion points: uploadedImages and prompt parameters in SKILL.md and referenced command examples.
Boundary markers: The skill does not use delimiters or explicit 'ignore' instructions to separate user input from the agent's logic.
Capability inventory: The skill executes shell commands via qhkit, performs network operations to the vendor's API, and modifies the local file system during environment setup.
Sanitization: No evidence of input validation or sanitization is present for user-provided prompts or file paths.
[COMMAND_EXECUTION]: The skill executes multiple shell commands for tool installation and operation, including npm, curl, tar, and sha256sum.
[DYNAMIC_EXECUTION]: The skill performs runtime installation and execution of the Node.js binary and the qhkit package to build the necessary execution environment.

qinghu-image-eraser