T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:15
- Finding
- Unpinned Third-Party Package Installation## Vulnerability Details **File Location**: `SKILL.md:15` **Vulnerability Type**: Unpinned third-party dependency installation **Risk Level**: Medium ```bash pip install smooth-py ``` ### Technical Analysis The skill instructs users or agents to install `smooth-py` from the configured Python package index without specifying a reviewed version or verifying an artifact hash. As a result, the package and its transitive dependencies remain mutable after the skill has been audited. Python package installation can execute package-controlled build or installation logic. If the package publisher, one of its dependencies, or the configured package index is compromised, following this instruction could cause attacker-controlled code to run locally. The reviewed material does not establish that `smooth-py` is currently malicious; the finding concerns the unsafe, unpinned supply-chain installation method. ### Attack Path 1. An agent loads the skill and discovers that Smooth CLI is not installed. 2. The agent or user follows the documented `pip install smooth-py` instruction. 3. `pip` resolves the current package release and its transitive dependencies from the configured index. 4. A compromised or malicious release supplies attacker-controlled package content or installation logic. 5. That logic executes with the privileges of the account running `pip`. 6. The installed code can subsequently run whenever the documented Smooth commands are invoked. ### Impact Assessment Successful exploitation could provide arbitrary code execution under the invoking user's privileges. The attacker could access files, environment variables, credentials, browser-related data, and network resources available to that account. If installation is performed by a privileged account or in a sensitive shared environment, the scope could expand accordingly. No privilege escalation beyond the installer's existing permissions is demonstrated by the reviewed fi ...[truncated 3 chars]
- Remediation
- ## Remediation Suggestions - Pin `smooth-py` to an explicitly reviewed version rather than installing the latest available release. - Use a lock file or constraints file to pin all transitive dependencies. - Require artifact hashes, such as with `pip install --require-hashes -r requirements.txt`. - Document and enforce the expected official package index and verified publisher. - Install the dependency in an isolated, least-privileged virtual environment. - Integrate dependency vulnerability and provenance checks into the release process. - Review and deliberately approve dependency updates before changing the pinned version.