T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:53
- Finding
- Unpinned Third-Party Packages and Browser Artifact<![CDATA[ ## Vulnerability Details **File Location**: `SKILL.md`, lines 53–56 **Vulnerability Type**: Uncontrolled third-party dependency acquisition **Risk Level**: Medium ### Vulnerable Code ```bash # 1. 安裝 Camoufox + patchright + lxml pip3.14 install camoufox lxml patchright # 2. 下載 Camoufox 瀏覽器（~280MB） camoufox fetch ``` ### Technical Analysis The installation instructions retrieve `camoufox`, `lxml`, and `patchright` without pinning exact versions or verifying package hashes. The installed Camoufox command then downloads a browser artifact, but the skill does not specify an expected version, checksum, or signature. Consequently, the code and browser installed by a user may differ from the components that were reviewed. This creates a supply-chain risk if a package release, package registry account, distribution source, or downloaded browser artifact is compromised. Python package installation can execute build and installation logic, while a compromised browser binary will execute whenever the skill performs a fetch operation. No evidence indicates that the currently named packages are malicious. The vulnerability is the absence of controls that ensure users install the reviewed artifacts. ### Attack Path 1. An attacker compromises a dependency publisher account, package distribution channel, or browser artifact source. 2. The attacker publishes a modified version under one of the dependency names or replaces the artifact retrieved by `camoufox fetch`. 3. A user follows the documented installation instructions. 4. Because no version or hash is enforced, the package manager or Camoufox utility retrieves the attacker-controlled release. 5. Malicious installation logic or the modified browser binary executes with the privileges of the installing or invoking user. ### Impact Assessment Successful exploitation could execute arbitrary code with the privileges of the user installing or running the skill. This may permit access to that user's files, en ...[truncated 242 chars]
- Remediation
- <![CDATA[ ## Remediation Suggestions 1. Pin every Python dependency to a reviewed, exact version in a lock file. 2. Record and enforce cryptographic hashes, for example through a requirements file used with `pip --require-hashes`. 3. Install packages only from an explicitly configured, trusted package index. 4. Pin the Camoufox browser artifact to a reviewed version and verify its checksum or publisher signature before execution. 5. Document a reproducible installation procedure and periodically review pinned components for security updates. 6. Run installation and browser automation from a dedicated, unprivileged environment or container. ]]>