T08 · Insecure Dependencies
Error
- Location
SKILL.md:80- Finding
Mutable npm Package Is Downloaded and Executed with Wallet Authority
- Content
View full analysis
--to 0xRecipient --amount 0.01 ``` ```bash npx @vincentai/cli@latest wallet send-tx --key-id --to 0xContract --data 0xCalldata --value 0 ``` ```bash npx @vincentai/cli@latest raw-signer sign --key-id --message 0x --curve ethereum ``` ### Technical Analysis The Skill instructs the agent to invoke `npx @vincentai/cli@latest` for all wallet operations. The `latest` npm tag is mutable and does not identify a fixed, audited package artifact. Consequently, the effective implementation can change after the Skill has been reviewed without any corresponding modification to `SKILL.md`. Depending on the local npm cache and `npx` configuration, invoking these commands can retrieve and execute a package from the npm registry. The downloaded package executes with the permissions of the agent process. It also operates in a context containing a persisted wallet API credential and is trusted to construct high-impact financial requests. The reviewed project contains only `SKILL.md`; it does not include the CLI implementation, a lockfile, an integrity hash, or another mechanism that would allow the executed artifact to be verified against the audited version. This creates a supply-chain trust boundary around code capable of transferring assets, invoking arbitrary smart contracts, and requesting raw signatures. ### Attack Path 1. An attacker compr ...[truncated 1734 chars]- Remediation
View remediation