T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:11
- Finding
- Downloaded Native Runtime Is Not Cryptographically Verified## Vulnerability Details **File Location**: `SKILL.md`, lines 11-50 **Vulnerability Type**: Unverified third-party executable dependency **Risk Level**: Medium The Skill downloads and automatically extracts platform-specific native sherpa-onnx runtime archives and a voice model from GitHub releases. Although the runtime version is pinned and the downloads use HTTPS, the configuration does not specify or verify cryptographic checksums or signatures. ```json "install": [ { "id": "download-runtime-macos", "kind": "download", "os": ["darwin"], "url": "https://github.com/k2-fsa/sherpa-onnx/releases/download/v1.12.23/sherpa-onnx-v1.12.23-osx-universal2-shared.tar.bz2", "archive": "tar.bz2", "extract": true, "stripComponents": 1, "targetDir": "runtime", "label": "Download sherpa-onnx runtime (macOS)", }, { "id": "download-runtime-linux-x64", "kind": "download", "os": ["linux"], "url": "https://github.com/k2-fsa/sherpa-onnx/releases/download/v1.12.23/sherpa-onnx-v1.12.23-linux-x64-shared.tar.bz2", "archive": "tar.bz2", "extract": true, "stripComponents": 1, "targetDir": "runtime", "label": "Download sherpa-onnx runtime (Linux x64)", }, { "id": "download-runtime-win-x64", "kind": "download", "os": ["win32"], "url": "https://github.com/k2-fsa/sherpa-onnx/releases/download/v1.12.23/sherpa-onnx-v1.12.23-win-x64-shared.tar.bz2", "archive": "tar.bz2", "extract": true, "stripComponents": 1, "targetDir": "runtime", "label": "Download sherpa-onnx runtime (Windows x64)", }, { "id": "download-model-lessac", "kind": "download", "url": "https://github.com/k2-fsa/sherpa-onnx/releases/download/tts-models/vits-piper-en_US-lessac-high.tar.bz2", "archive": "tar.bz2", "extract": ...[truncated 2444 chars]
- Remediation
- ## Remediation Suggestions 1. Publish and pin a trusted SHA-256 or stronger digest for every supported runtime archive and the model archive. 2. Verify the complete downloaded archive before extraction and fail installation on any mismatch. 3. Prefer upstream cryptographic signatures in addition to hashes, and verify them against a pinned, independently distributed maintainer public key. 4. Ensure verification metadata is reviewed whenever the sherpa-onnx version or model is updated. 5. Extract archives only after verification and reject absolute paths, parent-directory traversal entries, links escaping the destination, and unexpected executable files. 6. Run the runtime with ordinary user privileges and restrict filesystem and network access where the host platform supports sandboxing. 7. Document the exact upstream release provenance and a reproducible update procedure so reviewers can validate future dependency changes.