T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:28
- Finding
- Unpinned Remote Installation Creates Supply-Chain Risk<![CDATA[ ## Vulnerability Details **File Location**: `SKILL.md:28-31` and `README.md:12-15` **Vulnerability Type**: `T08: Insecure Dependencies` **Risk Level**: Medium ### Vulnerable Code ```bash ## Install npx skills add BarbaraLedbettergq/wallpaper-claw-skill ``` The README provides the equivalent installation instruction: ```bash # Via npx skills: npx skills add BarbaraLedbettergq/wallpaper-claw-skill ``` ### Technical Analysis The documented installation command invokes an unpinned `npx` package and installs the Skill from a mutable repository reference. It does not constrain the installer package to a reviewed version, pin the Skill to an immutable commit, or verify downloaded content with a checksum or signature. Consequently, the code executed or installed when a user follows this instruction can differ from the version covered by this audit. Although no malicious dependency or installation payload is present in the audited project itself, compromise of the npm package, publisher account, source repository, or resolution infrastructure could turn this command into a code-execution vector. ### Attack Path 1. An attacker compromises the npm package used by `npx`, its publisher account, or the mutable upstream Skill repository. 2. The attacker publishes a malicious installer release or modifies the repository content referenced by the installation command. 3. A user follows the documented unpinned installation instruction. 4. `npx` retrieves the current remote package, which may execute package lifecycle or installer code. 5. The malicious installer executes with the permissions of the user running the command or installs attacker-controlled Skill content for later execution. ### Impact Assessment Successful exploitation could permit arbitrary code execution with the installing user's privileges. Depending on those privileges, the attacker could access user-readable files and credentials, alter local configuration, install malicious Skill code, o ...[truncated 136 chars]
- Remediation
- <![CDATA[ ## Remediation Suggestions 1. Pin the `npx` installer to an explicitly reviewed version, for example `npx skills@<reviewed-version>`. 2. Pin the Skill source to an immutable release tag or commit hash rather than a mutable repository reference. 3. Publish and verify cryptographic checksums or signatures for released Skill artifacts. 4. Use installation modes that disable package lifecycle scripts where supported. 5. Document the exact reviewed installer version and Skill revision. 6. Periodically audit the pinned installer and update it through a controlled review process. ]]>