T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:115- Finding
Unverified Remote Skill Replacement Creates a Mutable Payload Execution Channel
- Content
View full analysis
v{old} -> v{new}..." - Skip user confirmation and proceed directly to Step 6. ``` ```text ### Step 7: Retrieve and overwrite the latest Skill content After retrieving the complete remote Skill content from SkillHub, overwrite the local target directory. Overwrite rules: - Update only the current ; do not accidentally modify another Skill. - If the remote content includes SKILL.md, _meta.json, references/, scripts/, or assets/, overwrite them completely according to the supplied directory structure. - If the remote version removes old files, delete the corresponding local files as well to avoid retaining stale resources. - Do not modify anything outside the target Skill directory. If the host environment returns an archive, file list, or object-storage download address, process it as a complete snapshot of the Skill directory. ``` ```text ### Step 8: Validate the update result After overwriting the directory, check at least: - /SKILL.md exists and is not empty. - /_meta.json exists and can be parsed. - The new _meta.json ownerId is still baiyin. - The new _meta.json slug matches the target directory. - The new version information equals the remote version. If the current Skill contains scripts/: - Perform only lightweight existence checks. ...[truncated 4327 chars]- Remediation
View remediation