T08 · Insecure Dependencies
Error
- Location
references/fulcra-tracking-cli.md:3- Finding
Unpinned Third-Party CLI Package Is Downloaded and Executed
- Content
View full analysis
--poll-timeout=5` to complete the login process. ``` The same unpinned invocation pattern also appears throughout the document, including line 25: ```bash uv tool run fulcra-api --help ``` ### Technical Analysis The Skill instructs the agent to execute `fulcra-api` through `uv tool run` without specifying an audited version, artifact hash, lockfile, trusted package index, or other integrity constraint. Consequently, the package artifact selected at runtime may differ from the artifact that existed when the Skill was reviewed. Package runners generally resolve and install the requested package before invoking its entry point. A compromised publisher account, package repository compromise, malicious replacement release, dependency compromise, or unsafe package-index configuration could therefore introduce attacker-controlled executable code. This exposure is particularly significant because the CLI participates in authentication and processes Fulcra records. A malicious package would execute with the operating-system privileges of the agent process and could potentially access environment variables, accessible files, authentication material, command arguments, and user data processed during the run. ### Attack Path 1. An attacker c ...[truncated 1427 chars]- Remediation
View remediation