T08 · Insecure Dependencies
Warning
- Location
SKILL.md:42- Finding
Unpinned Third-Party Packages May Execute Untrusted Supply-Chain Code
- Content
View full analysis
-n 10 ``` Additional unpinned installation guidance appears at lines 151-155: ```bash pip install solograph ``` ### Technical Analysis The Skill installs or executes third-party Python packages without specifying reviewed versions, cryptographic hashes, or a verified package source. In particular, `uvx` can retrieve and immediately execute the currently published package from a package registry. The documentation alternates between the package or command names `solograph` and `solograph-cli`. Without explicit clarification of the canonical distribution name and publisher, this inconsistency increases the risk of package substitution, typosquatting, or dependency confusion. The effective code executed by these commands can change after the Skill has been audited because the package registry determines which current release is downloaded. Therefore, reviewing `SKILL.md` alone cannot establish the safety of the code ultimately executed. ### Attack Path 1. An attacker publishes a package under a confusingly similar or incorrectly referenced name, compromises the legitimate package, or compromises a future package release. 2. A user or agent follows the Skill's installation guidance or invokes the documented `uvx` command. 3. The package manager retrieves the current unpinned package from the configured registry. 4. Package installation hooks, imported modules, or the package entry point execute attacker-controlled code. 5. The malicious code runs with the permissions and environment available to the user or agent executing the Skill. ### Impact Assessment ...[truncated 650 chars]- Remediation
View remediation