T08 · Insecure Dependencies
Warning
- Location
- README.md:8
- Finding
- Unpinned npm CLI Package Is Downloaded and Executed During Installation## Vulnerability Details **File Locations**: - `README.md:8-13` - `README.md:32-35` - `SKILL.md:8-13` - `SKILL.md:32-35` **Vulnerability Type**: Unpinned third-party package execution **Risk Level**: Medium ### Vulnerable Code The installation instructions in both `README.md` and the root `SKILL.md` contain the following command: ```markdown ## Install ```bash npx skills add adhikjoshi/macpilot-skills ``` This uses the [skills](https://github.com/vercel-labs/skills) CLI to install skills into your agent of choice. ``` The command is repeated in the quick-start section: ```bash # Install MacPilot skills into Claude Code npx skills add adhikjoshi/macpilot-skills ``` ### Technical Analysis The command invokes the npm package named `skills` through `npx` without specifying an exact package version or integrity value. If the package is not already available locally, `npx` can retrieve and execute the version currently resolved by the npm registry. Consequently, the executed installer is not fully represented by or immutable relative to the audited repository. Its behavior may change after this repository has been reviewed. Exploitation would require compromise of the relevant npm package, its publisher account, registry resolution, or another part of the package distribution chain. No evidence that the currently published package is malicious was identified during this audit. This is an insecure dependency and supply-chain pattern rather than evidence of an embedded malicious payload in the project itself. ### Attack Path 1. An attacker compromises the `skills` npm package, its publisher credentials, or its distribution path. 2. The attacker publishes a modified version containing malicious installation or runtime behavior. 3. A user follows the documented command without an explicit version: `npx skills add adhikjoshi/macpilot-skills`. 4. `npx` resolves, downloads, and executes the attacke ...[truncated 906 chars]
- Remediation
- ## Remediation Suggestions 1. Pin the CLI to an explicitly reviewed version: ```bash npx --yes skills@<reviewed-version> add adhikjoshi/macpilot-skills ``` 2. Record and verify the expected package publisher, version, and package integrity hash before execution. 3. Prefer a lockfile-backed installation process where practical, with dependency updates handled through review. 4. Disable or separately review dependency lifecycle scripts when they are not required. 5. Retain and prominently document the manual installation method for security-sensitive environments, because copying the reviewed `SKILL.md` files avoids executing a remotely resolved installer. 6. Apply the same corrected instructions to both `README.md` and the root `SKILL.md` so the duplicated documentation remains consistent.