T03 · Remote Payload Retrieval and Execution
Error
- Location
scripts/seedance:42- Finding
Mutable Remote Bootstrap Script Is Downloaded and Executed Without Integrity Verification
- Content
View full analysis
/dev/null 2>&1 && return 0 local gp="$VENV_DIR/get-pip.py" echo "[wrapper] ensurepip unavailable; fetching get-pip.py" >&2 if command -v curl >/dev/null 2>&1; then curl -fsSL https://bootstrap.pypa.io/get-pip.py -o "$gp" || return 1 elif command -v wget >/dev/null 2>&1; then wget -qO "$gp" https://bootstrap.pypa.io/get-pip.py || return 1 else "$VENV_PY" -c "import urllib.request; urllib.request.urlretrieve('https://bootstrap.pypa.io/get-pip.py', '$gp')" || return 1 fi "$VENV_PY" "$gp" >/dev/null 2>&1; local rc=$? rm -f "$gp" [ $rc -eq 0 ] } ``` ### Technical Analysis When `ensurepip` is unavailable, the wrapper downloads the current `get-pip.py` from a remote URL and immediately executes it. HTTPS protects the transfer in normal circumstances, but the script is not pinned to a reviewed version and is not checked against a cryptographic hash or signature. Consequently, the effective code executed by the Skill can change after the Skill package has been reviewed. Compromise of the remote distribution infrastructure, its certificate issuance path, DNS resolution, or a trusted network proxy could replace the bootstrap script with arbitrary Python code. This behavior exceeds the minimum requirement for video generation. A missing package installer should produce a clear prerequisite error rather than cause the Skill to retrieve and execute mutable code automatically. ### Attack Path 1. The Skill is run on a host where virtual-environment creation works but `ensurepip` is unavailable. 2. `bootstrap_pip` retrieves `https://bootstrap.pypa.io/get-pip.py`. 3. An attacker compromises the upstream resource or otherwise supplies a malicious response through a trusted interceptio ...[truncated 741 chars]- Remediation
View remediation