T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:28- Finding
Unverified Remote WebAssembly Payload Download and Execution
- Content
View full analysis
", ...args] }) ``` ``` ### Technical Analysis The Skill instructs users to download an executable WebAssembly component from the mutable `main` branch of an external personal GitHub repository and then execute that component with `wasm-sandbox-run`. The remote binary is not included in the audited project. The documentation does not pin the download to an immutable Git commit or release, specify an expected cryptographic digest, or require signature verification. Consequently, the payload executed by users can change after the Skill has been reviewed without requiring any modification to the audited files. Although the component is intended to run in a WebAssembly sandbox, the documentation directs users to expose local directories through `workDir` or `mapDir`. A compromised component could therefore operate on files available through those mappings. The operations reference also documents that outbound network access can be explicitly enabled, which could increase the impact if such permission is granted. ### Attack Path 1. An attacker compromises the external repository, its maintainer account, the publication workflow, or another mechanism capable of replacing the artifact on the mutable `main` branch. 2. The attacker replaces `opencv-component.wasm` with a malicious or backdoored WebAssembly component. 3. A user follows the S ...[truncated 1444 chars]- Remediation
View remediation