T03 · Remote Payload Retrieval and Execution
Error
- Location
- SKILL.md:47
- Finding
- Unverified Aitun Installation Scripts Are Executed Directly from the Internet## Vulnerability Details **File Location**: `SKILL.md:47-57` and repeated in `SKILL.md:132` **Vulnerability Type**: Remote payload retrieval and immediate execution **Risk Level**: High **Vulnerable code:** ```bash pip install aitun ``` Or install via one-line script (Linux/macOS): ```bash curl -fsSL https://aitun.cc/install.sh | bash ``` Windows (PowerShell): ```powershell irm https://aitun.cc/install.ps1 | iex ``` The same unsafe alternatives are repeated in the CLI reference: ```text The `aitun` command (installed via `pip install aitun`, or alternatively `curl -fsSL https://aitun.cc/install.sh | bash` / `irm https://aitun.cc/install.ps1 | iex` on Windows) accepts these flags: ``` ### Technical Analysis Both installation alternatives download mutable content and send it directly to a command interpreter. Neither command pins an installer version, verifies a cryptographic digest or signature, nor gives the operator an opportunity to inspect the downloaded script before execution. HTTPS protects the connection in transit but does not make the server content immutable or establish that every future version of the installer is safe. Compromise of `aitun.cc`, its deployment pipeline, DNS or TLS infrastructure, or an upstream dependency could therefore change the effective code executed after the Skill has already been reviewed. Direct remote-script execution is not necessary for the declared collaboration functionality because the Skill already supports package-manager installation. The remote installers consequently exceed the minimum safe mechanism needed to obtain the tunnel client. ### Attack Path 1. An agent follows the Skill's installation procedure. 2. An attacker compromises the installer host, publishing pipeline, or relevant delivery infrastructure. 3. The attacker replaces `install.sh` or `install.ps1` with a malicious payload. 4. `curl | bash` or `irm | iex` passes that payload d ...[truncated 657 chars]
- Remediation
- ## Remediation Suggestions - Remove the `curl | bash` and `irm | iex` installation alternatives. - Install a specifically reviewed and pinned Aitun version through a trusted package registry. - Use a lockfile and require published cryptographic hashes or verifiable signatures. - If a standalone installer is unavoidable, download it to a file first, validate its digest and signature against an independently distributed value, inspect it, and only then execute it. - Perform installation in an isolated, unprivileged environment rather than as an administrator or root user. - Update the repeated CLI-reference text at line 132 so it does not continue recommending the unsafe commands.