T08 · Insecure Dependencies
Warning
- Location
SKILL.md:17- Finding
Unpinned Third-Party CLI Installed Globally
- Content
View full analysis
=0.7.0" } ``` ### Technical Analysis The skill instructs users to install the `mcporter` package globally without specifying an exact, reviewed version or verifying package integrity. The package manifest similarly permits any version equal to or newer than `0.7.0`. This configuration allows dependency resolution to select a future release that was not available during the audit. If the package publisher account, package registry, or upstream release process is compromised, a malicious accepted release could be installed. Depending on package-manager configuration, package lifecycle scripts may execute during installation. The installed CLI will also execute later with the permissions of the invoking user. Global installation increases exposure because the package becomes available across projects and sessions rather than remaining isolated to this skill. No lockfile, checksum, integrity value, or documented package provenance validation is present. ### Attack Path 1. An attacker compromises the upstream package, publisher account, or release pipeline for `mcporter`. 2. The attacker publishes a malicious version that satisfies the unrestricted `>=0.7.0` dependency range. 3. A user follows the skill instructions and runs `npm install -g mcporter`, or otherwise resolves dependencies from `package.json`. 4. The package manager downloads the compromised release. 5. Malicious lifecycle code may execute during installation, or malicious behavior executes when the globally installed CLI is invoked. 6. The payload operates with the invoking user's privileges and may access data available ...[truncated 921 chars]- Remediation
View remediation