T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:12
- Finding
- Unpinned Third-Party Skill Installation Creates a Supply-Chain Risk## Vulnerability Details **File Location**: `SKILL.md`, lines 12 and 54 **Vulnerability Type**: Unpinned third-party dependency installation **Risk Level**: Medium ### Vulnerable Code At line 12: ```text 本技能属于 QA Test Skills 技能集（49 个技能之一），完整工作流体验需安装全套：npx skills add Kokxi/qa-test-skills ``` At line 54: ```text > ⚠️ 本技能单独使用效果有限，建议配合完整技能集（12 步工作流）使用。安装：npx skills add Kokxi/qa-test-skills ``` Both instructions recommend executing: ```shell npx skills add Kokxi/qa-test-skills ``` ### Technical Analysis The installation command relies on mutable third-party components without specifying an immutable package version, repository commit, integrity digest, or signature. In particular: 1. `npx` may resolve and execute an externally maintained CLI package according to the local package-manager configuration. 2. `Kokxi/qa-test-skills` is referenced without a commit hash or other immutable revision. 3. The requested installation expands the trusted scope from the audited skill to a collection described as containing 49 skills. 4. The project provides no checksum, signature, lockfile, or documented verification procedure for that additional content. This does not establish that the current upstream content is malicious. However, it creates a supply-chain trust boundary in which future or compromised upstream content can differ from what was originally reviewed. ### Attack Path 1. An attacker compromises the relevant package, repository, maintainer account, publication process, or dependency used by the installer. 2. The attacker publishes a modified CLI release or changes the unpinned `Kokxi/qa-test-skills` content. 3. A user follows the installation recommendation in `SKILL.md`. 4. `npx` resolves the available installer, and the installer retrieves the mutable third-party skill bundle. 5. The compromised content is installed without verification against a reviewed immutable revision. 6. If the instal ...[truncated 1071 chars]
- Remediation
- ## Remediation Suggestions 1. Pin the `npx` installer to an explicitly reviewed version rather than relying on implicit package resolution. 2. Pin `Kokxi/qa-test-skills` to an immutable commit hash or signed release tag. 3. Publish a cryptographic checksum or signature for the expected bundle and require verification before installation. 4. Replace the command with a documented two-stage process: download or inspect the exact pinned revision first, then install it only after review. 5. Audit all skills and scripts in the referenced bundle before recommending activation. 6. Run installation in a sandbox or least-privileged environment with restricted filesystem, network, credential, and tool access. 7. Document the exact additional files, scripts, hooks, and permissions introduced by the full bundle. 8. Use lockfiles or an equivalent dependency manifest to make transitive dependency resolution reproducible.