qinghu-sales-script
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPERSISTENCEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads Node.js binaries and verification files from nodejs.org, which is a trusted service. It also utilizes the well-known npmmirror.com mirror for efficient package management.
- [PERSISTENCE]: Instructions guide the user to update their PATH in ~/.bashrc to include the local Node.js installation. This is a standard and benign environment configuration for developer tools.
- [COMMAND_EXECUTION]: The skill executes the qhkit CLI utility to perform script generation tasks, with functionality strictly scoped to the skill's primary purpose.
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: Product metadata and Douyin/TikTok URLs in SKILL.md. 2. Boundary markers: None used. 3. Capability inventory: Executes qhkit for script production and status monitoring. 4. Sanitization: No explicit filtering or validation specified. The risk is assessed as low due to the structured command-line interaction.
- [SAFE]: The automated alert for remote code execution is a false positive. The skill uses a curl-to-sha256sum pipeline to verify the integrity of the downloaded Node.js binary before installation, representing a secure development practice rather than malicious execution.
Audit Metadata