T08 · Insecure Dependencies
Warning
- Location
SKILL.md:276- Finding
Unpinned and Unattended Global Installation of Third-Party Skills
- Content
View full analysis
# Install a discovered skill npx skills add -g -y ``` `README.md:15-17`: ```bash npx skills add https://github.com/clawdbot-skills/task-decomposer -g -y ``` `README.md:99-102`: ```bash # Search the skills ecosystem npx skills find # Install a discovered skill npx skills add -g -y ``` ### Technical Analysis The Skill instructs agents or users to search a live third-party ecosystem and globally install discovered Skills using `npx` and the flags `-g -y`. Neither the Skills CLI nor the selected Skill is pinned to an immutable version or commit. The workflow also does not require checksum or signature verification, publisher validation, repository review, or an allowlist. Using `npx` can download and execute tooling that is not already installed locally. The generated installation command then retrieves mutable third-party Skill content. The `-y` flag suppresses interactive confirmation, while `-g` expands the installation scope beyond the current project or task. The documented evaluation criteria consider relevance, completeness, and documentation quality, but do not establish dependency provenance or integrity. The user-confirmation statement at `SKILL.md:470` applies to creating a new Skill, not to installing a discovered third-party Skill. No specific malicious dependency was identified during this audit, and the re ...[truncated 1839 chars]- Remediation
View remediation