T03 · Remote Payload Retrieval and Execution
Warning
- Location
examples/example-guide.html:7- Finding
Mutable Third-Party JavaScript Is Retrieved and Executed at Runtime
- Content
View full analysis
``` The corresponding Skill instructions require generated pages to use this remote resource: ```markdown 4. **单文件交付**：所有的 HTML、Tailwind CSS（通过 CDN）、FontAwesome 图标（通过 CDN）和 Vanilla JavaScript 逻辑必须封装在**同一个 HTML 文件**中。零外部依赖（除了 CDN 链接）。 ``` ```markdown - **技术栈**：严格使用 Tailwind CSS (CDN `https://cdn.tailwindcss.com`) 进行样式编写。 ``` ### Technical Analysis The page loads executable JavaScript from `https://cdn.tailwindcss.com` each time it is opened. The URL does not identify an immutable dependency version, and the script element does not include Subresource Integrity verification. Consequently, the code executed by the browser can change after the Skill and generated HTML have been reviewed. A compromise of the CDN, its publishing pipeline, DNS or network trust infrastructure, or the upstream resource could cause attacker-controlled JavaScript to execute in the page's browser context. This behavior is also mandated by `SKILL.md`, so pages subsequently generated according to the Skill are expected to inherit the same exposure. ### Attack Path 1. An Agent follows `SKILL.md` and creates an HTML study guide containing the Tailwind CDN script. 2. A user opens the generated page while connected to the internet. 3. The browser requests JavaScript from `https://cdn.tailwindcss.com`. 4. The CDN resource or its delivery path has been compromised or modified after the local HTML was reviewed. 5. The browser executes the modified response as JavaScript in the generated page's origin context. 6. The injected code reads or modifies page content and may access data available to scripts under that origin. 7. The injected code may send accessible infor ...[truncated 901 chars]- Remediation
View remediation