T08 · Insecure Dependencies
Warning
- Location
SKILL.md:9- Finding
Unpinned External Dependency Executes Unaudited Authentication Scripts
- Content
View full analysis
**Requires `caremax-auth` as a sibling directory** (`../caremax-auth/`). If missing, tell the user to install caremax-auth first (e.g. `npx skills add KittenYang/caremax-skills`). ## Prerequisites — Auto-Auth (MANDATORY) ```bash APICALL="bash ../caremax-auth/scripts/api-call.sh" ``` If `api-call.sh` returns `{"error":"no_credentials",...}` → **immediately run `bash ../caremax-auth/scripts/auth-flow.sh [base_url]`** (from this skill’s root). ``` ### Technical Analysis The skill requires executable shell scripts from the sibling `../caremax-auth/` directory, but those scripts are not included in the audited project. Consequently, their implementation, integrity, credential handling, API destination validation, and command construction cannot be verified. If the sibling dependency is absent, the skill recommends installing it with: ```bash npx skills add KittenYang/caremax-skills ``` This command does not specify an immutable version, commit, or integrity digest. The resulting executable content may therefore differ from the content originally reviewed. The instructions then require the agent to invoke `api-call.sh` and automatically run `auth-flow.sh` when credentials are unavailable. This creates a supply-chain trust boundary in which unaudited, mutable third-party content is installed and executed locally. There is no evidence in the audited file that the dependency is currently malicious; the risk arises from the absence of version pinning, integrity verification, and local review of the scripts before execution. ### Attack Path 1. An attacker compromises the external dependency source, its distribution account, or another part of the installation path. 2. The attacker publishes modified `caremax-auth` content under the mutable source referenced by the s ...[truncated 1447 chars]- Remediation
View remediation