T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:8
- Finding
- Unpinned Third-Party Installation Through npx## Vulnerability Details **File Location**: `SKILL.md`, lines 8 and 54 **Vulnerability Type**: Unpinned third-party package and mutable external skill dependency **Risk Level**: Medium **Complete Code Snippets**: Line 8: ```text 本技能属于 QA Test Skills 技能集（49 个技能之一），完整工作流体验需安装全套：npx skills add Kokxi/qa-test-skills ``` Line 54: ```text > ⚠️ 本技能单独使用效果有限，建议配合完整技能集（12 步工作流）使用。安装：npx skills add Kokxi/qa-test-skills ``` ### Technical Analysis The Skill recommends invoking `npx` to install content from `Kokxi/qa-test-skills`. The command does not pin the `skills` npm package to an exact reviewed version, and the external skill collection is not pinned to an immutable release or commit. If `skills` is not already installed locally, `npx` may retrieve and execute package code from the npm registry. The resulting installation can also incorporate mutable content from the referenced external repository. The project supplies no lockfile, checksum, signature, or vendored source that would allow users to verify that the downloaded components match an audited version. This is a supply-chain weakness rather than evidence that the currently referenced package or repository is malicious. Exploitation depends on compromise, replacement, or malicious modification of one of the external components. ### Attack Path 1. An attacker compromises the npm package, its publisher account, the external repository, or another relevant distribution component. 2. The attacker publishes malicious package code or modifies the externally hosted Skill content. 3. A user follows the recommendation and runs `npx skills add Kokxi/qa-test-skills`. 4. `npx` retrieves and potentially executes the unpinned package under the invoking user's privileges. 5. The installer retrieves or installs attacker-controlled Skill content. 6. That code or content can operate within the permissions available to the process or subsequently influe ...[truncated 673 chars]
- Remediation
- ## Remediation Suggestions - Pin the `skills` npm package to an exact, reviewed version rather than allowing `npx` to resolve a mutable version. - Pin `Kokxi/qa-test-skills` to a reviewed commit hash or immutable signed release. - Publish and verify cryptographic checksums or signatures for all downloaded artifacts. - Prefer a locally vendored and audited installer where practical. - Use a package lockfile or equivalent integrity metadata for executable dependencies. - Warn users explicitly that the command may download and execute third-party code. - Require explicit user approval before running the installation command. - Run installation in a sandbox or least-privileged environment without production credentials. - Re-audit external Skill content whenever its pinned version is updated.