T08 · Insecure Dependencies
Warning
- Location
SKILL.md:88- Finding
Unverified Global Installation of Third-Party Skills
- Content
View full analysis
` - Install a skill from GitHub or other sources - `npx skills check` - Check for skill updates - `npx skills update` - Update all installed skills ``` ```markdown ### Step 4: Offer to Install If the user wants to proceed, you can install the skill for them: ```bash npx skills add -g -y ``` The `-g` flag installs globally (user-level) and `-y` skips confirmation prompts. ``` ### Technical Analysis The skill instructs the agent to use `npx` and the Skills CLI to retrieve and install dynamically selected third-party skills from GitHub or other external sources. The documented installation process does not require: - Pinning the Skills CLI or installed skill to a reviewed version or immutable commit. - Verifying package integrity with a checksum or signature. - Restricting installations to an allowlist of trusted publishers and repositories. - Reviewing downloaded manifests, instructions, scripts, or lifecycle hooks. - Installing the content in an isolated or project-local environment. The `-g` option installs the selected skill at user scope, increasing its availability beyond the current project. The `-y` option suppresses confirmation prompts that could otherwise give the user an opportunity to inspect or reject the selected package. This file does not itself contain a malicious payload, and exploitation depends on a malicious or compromised external package being selected. Nevertheless, the prescribed workflow creates a sup ...[truncated 1888 chars]- Remediation
View remediation