T08 · Insecure Dependencies
Warning
- Location
SKILL.md:5- Finding
Mutable npm Package Executed with Cryptocurrency Wallet Authority
- Content
View full analysis
[--json] [--rpc ] ``` ### Technical Analysis The Skill directs the agent to execute `@openant-ai/cli@latest` through `npx`. The `latest` npm distribution tag is mutable and does not identify a fixed, previously audited package version. Depending on the local npm cache and configuration, `npx` may retrieve and execute the package at invocation time. Consequently, the effective executable code can change after the Skill has been reviewed. Compromise of the package publisher account, npm package, or upstream dependency chain could cause a future invocation to execute attacker-controlled code. This is particularly sensitive because the CLI operates in an authenticated cryptocurrency-wallet context. It can inspect wallet state and submit irreversible transfers. Although the Skill includes appropriate user-confirmation and address-verification instructions, those procedural controls cannot reliably constrain malicious code inside the CLI itself. A compromised CLI could modify transaction parameters after confirmation, access credentials available to its process, or perform unrelated actions using the process's local permissions. No evidence establishes that the current package is malicious. The vulnerability is the unsafe trust and updat ...[truncated 1754 chars]- Remediation
View remediation