T08 · Insecure Dependencies
Warning
- Location
SKILL.md:136- Finding
Unpinned Third-Party Skill Installation Creates a Supply-Chain Risk
- Content
View full analysis
` ``` After the user picks, provide concrete install instructions. ``` `references/role-skill-catalog.md:17`: ```markdown | 📦 External | Community Skill (GitHub / agentskills.sh) | `npx skills add ` | ``` `references/role-skill-catalog.md:751`: ```markdown **How to install**: `npx skills add ` ``` `references/role-skill-catalog.md:765-768`: ```markdown 1. **Add a new Skill**: Search with `npx skills find` → evaluate quality → add to the relevant role 2. **Deprecate a Skill**: Remove promptly or note a replacement 3. **Add a new role**: Append a new section at the end of the appropriate category, update inheritance relationships 4. **Update external Skills**: Run `npx skills check` periodically to check for updates ``` ### Technical Analysis The Skill recommends numerous community-maintained dependencies and generates `npx skills add` commands without pinning the `skills` CLI version, repository commit, immutable release, or integrity digest. The reviewed project does not vendor or audit the installed content. Consequently, the effective dependency content can change after this project has been reviewed. Risk sources include compromise of an npm package, repository, maintainer account, mutable branch, or similarly named package. A malicious dependency could introduce executable code or hostile Skill instructions into the user's Agent environment. The installation feature is relevant to the declared recommendation functionality, but unrestricted installation from mutable community sources exceeds the minimum trust necessary merely to recommend Skills. Recommendations can be provided without automatica ...[truncated 1737 chars]- Remediation
View remediation
add ``` 11. Re-audit pinned dependencies before updating them and document the reviewed revision in the catalog. ]]>