T08 · Insecure Dependencies
Warning
- Location
SKILL.md:44- Finding
Unpinned Third-Party Audit Tools Are Installed and Executed
- Content
View full analysis
/dev/null ``` ### Technical Analysis The Skill instructs the Agent to install or execute third-party packages without pinning reviewed versions, verifying integrity hashes, validating publishers, or obtaining explicit user approval. In particular, `npx depcheck` may retrieve the current registry version and immediately execute package-controlled code. The `pip install` and `cargo install` commands similarly rely on mutable registry content and may execute package or build-system behavior during installation. The effective code executed by the Skill can therefore change after the Skill itself has been reviewed. This creates a supply-chain risk if a named package, publisher account, registry, or transitive dependency is compromised. It also increases exposure to dependency-confusion and package-substitution attacks when untrusted registry configuration is present. ### Attack Path 1. An attacker compromises one of the named packages, its publisher account, or a transitive dependency. 2. Alternatively, the execution environment is configured to use a malicious or untrusted package registry. 3. The requested audit utility is not already installed. 4. The Skill runs an unversioned `pip install`, `cargo install`, or `npx` command. 5. The package manager downloads the current, unverified package contents. 6. Package-controlled installation, build, or runtime code executes with the Agent process's permissions. 7. The malicious code can access resources available to that process, including project files, environ ...[truncated 749 chars]- Remediation
View remediation