qinghu-viral-video-mens
Fail
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: HIGHPERSISTENCEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The instructions suggest that the agent should append environment variable exports to the user's shell profile (
~/.bashrc). While intended for path management of the local Node.js installation, this modifies system startup files.\n- [EXTERNAL_DOWNLOADS]: The skill performs downloads from trusted organizations and well-known services. It fetches Node.js binaries fromnodejs.organd the required CLI tool@iqinghu/qhkitfrom official package registries.\n- [COMMAND_EXECUTION]: The environment bootstrapping section includes several shell operations: directory creation (mkdir), archive extraction (tar -xJf), and a multi-stage pipeline usingcurl,grep, andsha256sumto verify the integrity of downloaded binaries.\n- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect injection through user-supplied media files used as workflow inputs.\n - Ingestion points: Path references to video and image files in
SKILL.md.\n - Boundary markers: None identified for external data ingestion.\n
- Capability inventory: File system writes (installation), shell command execution, and network communication via the
qhkitCLI.\n - Sanitization: No content validation or sanitization of the input files is described.
Recommendations
- HIGH: Downloads and executes remote code from: https://nodejs.org/dist/v22.22.3/SHASUMS256.txt - DO NOT USE without thorough review
Audit Metadata