T08 · Insecure Dependencies
Error
- Location
requirements.txt:1- Finding
Automatic Installation of Unpinned Third-Party Dependencies
- Content
View full analysis
=0.1.0 notebooklm-py>=0.3.0 ``` `install.sh:22-36`: ```bash pip install --upgrade pip if [ -f "requirements.txt" ]; then pip install -r requirements.txt else # 至少安装 garth pip install garth fi # 3. 检查并安装 notebooklm-py 及其依赖 echo "📦 安装 notebooklm-py 及浏览器驱动..." pip install "notebooklm-py[browser]" # 4. 自动下载 Playwright 所需的 Chromium 浏览器 echo "🌐 正在下载 Chromium 浏览器内核 (用于 AI 登录)..." python3 -m playwright install chromium ``` `src/env_checker.py:35-43`: ```python @staticmethod def run_install(): """执行安装脚本并返回结果""" try: # 使用 sys.executable 确保在同一个 python 环境下安装 print("Installing dependencies...") subprocess.check_call([sys.executable, "-m", "pip", "install", "notebooklm-py[browser]"]) print("Downloading browser core...") subprocess.check_call([sys.executable, "-m", "playwright", "install", "chromium"]) ``` ### Technical Analysis The application installs packages using lower-bound version constraints rather than exact, verified versions. It also downloads the current Playwright Chromium build without an application-controlled checksum or artifact lock. Python package installation can execute package build and installation logic. Consequently, the effective code installed by this Skill may differ from the code reviewed during the audit. The runtime setup flow makes this especially significant because a user can trigger package installation by replying affirmatively to the interactive setup prompt. This finding does not establish that the named packages are malicious. The vulnerability is that the Skill has no reproducible dependency lock, hash verification, or upper version boundary to protect it from a compromise ...[truncated 1207 chars]- Remediation
View remediation