T08 · Insecure Dependencies
Warning
- Location
SKILL.md:278- Finding
Unpinned, Unattended Global Installation of Third-Party Skills
- Content
View full analysis
# Install a discovered skill npx skills add -g -y ``` `README.md:17`: ```bash npx skills add https://github.com/clawdbot-skills/task-decomposer -g -y ``` `README.md:99-105`: ```bash # Search the skills ecosystem npx skills find # Install a discovered skill npx skills add -g -y # Initialize a new skill npx skills init ``` The same installation pattern is repeated in the localized documentation at `README_CN.md:19` and `README_CN.md:101-107`. ### Technical Analysis The Skill directs agents and users to discover third-party Skills and install them using `npx skills add`. Neither the CLI package nor the discovered Skill is pinned to a reviewed, immutable version or commit. The installation examples also combine: - `-g`, which installs the Skill globally rather than confining it to the current project. - `-y`, which suppresses interactive confirmation. - Repository identifiers or URLs whose contents can change after this Skill has been audited. - Search results from an external ecosystem without a mandatory source-code or publisher verification step. The documented evaluation process considers relevance, completeness, and documentation quality, but it does not require verification of repository ownership, immutable revisions, package integrity, installation scripts, bundled executable code, or malicious Skill instructions. Although the audited project itself contains no malicious executable payload, following these instructions can introduce unrevie ...[truncated 2101 chars]- Remediation
View remediation