T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:8
- Finding
- Unpinned Third-Party Skill Installation Creates Supply-Chain Risk## Vulnerability Details **File Location**: `SKILL.md`, lines 8 and 48 **Vulnerability Type**: Unpinned third-party dependency installation **Risk Level**: Medium **Complete Code Snippet**: ```text npx skills add Kokxi/qa-test-skills ``` The same installation command is recommended at both identified locations. ### Technical Analysis The documentation recommends using `npx` to retrieve and install the third-party skill collection `Kokxi/qa-test-skills`. The command does not pin the installer or skill collection to an immutable package version, release, or commit hash. It also provides no checksum, integrity metadata, signature verification, or mandatory review procedure. Consequently, the content installed when a user follows this recommendation can differ from the content available when this project was audited. If the package registry entry, upstream repository, maintainer account, installer, or distribution channel is compromised, the command could introduce unreviewed instructions or executable components into the agent environment. The audited file does not establish that the referenced dependency is currently malicious. The vulnerability is the unsafe and mutable dependency acquisition mechanism. ### Attack Path 1. An attacker compromises the upstream package, repository, maintainer account, or distribution channel used by the installation command. 2. The attacker publishes a modified installer or skill collection under the expected mutable identifier. 3. A user follows the recommendation in `SKILL.md` and executes: ```text npx skills add Kokxi/qa-test-skills ``` 4. `npx` resolves and runs the available installer, which retrieves or installs the attacker-modified content. 5. The malicious or unreviewed skills become available in the agent environment and may subsequently influence agent behavior or execute with the permissions granted to the installer and agent runtime. ### Impact Assessment ...[truncated 584 chars]
- Remediation
- ## Remediation Suggestions 1. Pin both the `npx` installer and the referenced skill collection to reviewed, immutable versions or commit hashes. 2. Publish and verify cryptographic checksums or signatures for all downloaded artifacts. 3. Use an explicitly trusted registry or official repository rather than relying on mutable identifiers. 4. Add instructions requiring users to download and inspect the package contents before installation. 5. Run installation with least privilege in an isolated environment, without access to production credentials or sensitive files. 6. Document the files, permissions, scripts, and agent capabilities introduced by the dependency. 7. Replace both occurrences of the mutable installation command, including the duplicate recommendation at line 48. 8. Present the external collection as optional unless it is technically required, rather than encouraging users to install a broad unreviewed skill set.