T08 · Insecure Dependencies
Warning
- Location
SKILL.md:12- Finding
Unpinned Third-Party CLI and Workflow Skill Installation
- Content
View full analysis
-y ``` ``` ### Technical Analysis The npm package declaration does not specify a reviewed version or integrity hash. Package resolution may consequently retrieve a newer, materially different release than the one considered during this audit. The fallback workflow installation command also installs another skill without specifying its version or immutable source. The `-y` option suppresses interactive confirmation, reducing the opportunity for the user to review the package source, version, permissions, and installation effects. These mutable trust relationships create a software supply-chain risk. If the package publisher, registry account, distribution infrastructure, or workflow-skill source is compromised, attacker-controlled code or instructions could be introduced without modifying this audited project. ### Attack Path 1. An attacker compromises the npm package, publisher account, package distribution channel, or source used by `anygen skill install`. 2. The attacker publishes a malicious release or replaces a mutable workflow-skill artifact. 3. A user or Agent installs the dependency without an explicit version or integrity constraint. 4. The workflow installation proceeds non-interactively because of `-y`. 5. The Agent invokes the installed CLI or loads the installed skill. 6. The malicious component executes commands or supplies hostile instructions within the permissions available to the Agent. ### Impact Assessment A compromised executable dependency could perform arbit ...[truncated 511 chars]- Remediation
View remediation