T08 · Insecure Dependencies
- Location
README.md:34- Finding
Unpinned Remote Plugin Marketplace Creates a Supply-Chain Risk
- Content
View full analysis
Vulnerability Details
File Location:
README.md, lines 34-35
Vulnerability Type: Unpinned third-party dependency source
Risk Level: MediumVulnerable Code
powershell codex plugin marketplace add https://github.com/KinemaClawWorkspace/kinema-skills-marketplace.git codex plugin add kinema-concept-research@kinema-skills-marketplaceTechnical Analysis
The documented installation procedure registers a mutable remote Git repository as a plugin marketplace and then installs the Skill from that marketplace. Neither command pins the dependency to an immutable commit, a verified release artifact, or a cryptographically authenticated version.
Consequently, the content installed by a user may differ from the content covered by this audit. A later repository update, compromised maintainer account, or unauthorized marketplace modification could replace the reviewed Skill with altered instructions, scripts, or dependencies. No malicious payload is currently present in the audited project; the vulnerability is the absence of supply-chain integrity controls in the recommended installation process.
Attack Path
- An attacker compromises the marketplace repository, a maintainer account, or its publishing workflow.
- The attacker modifies the marketplace entry or referenced plugin content to include malicious instructions or executable files.
- A user follows the documented commands and registers the mutable repository.
- The plugin manager resolves and installs the attacker-controlled current content.
- When the installed Skill is loaded or invoked, that content executes with the permissions available to the plugin host or influences the Agent through malicious Skill instructions.
Impact Assessment
Exploitation could install attacker-controlled plugin content within the user's Codex environment. The resulting privileges depend on the plugin host and user account, but may include influencing A ...[truncated 370 chars]
- Remediation
View remediation
Remediation Suggestions
- Pin the marketplace and Skill installation to an immutable, reviewed Git commit or cryptographically signed release.
- Publish SHA-256 checksums for release artifacts and require verification before installation.
- Use signed Git tags or release signatures and document how users must verify the signer and signature.
- Record the exact audited marketplace revision and dependency version in the installation instructions.
- Protect repository publishing with branch protection, mandatory review, least-privilege credentials, and multi-factor authentication.
- Ensure update operations do not silently replace reviewed content; require explicit user approval and display revision changes.
- Periodically re-audit the marketplace manifest and all transitive plugin dependencies.