T08 · Insecure Dependencies
Warning
- Location
README.md:5- Finding
Unpinned Third-Party Installer and Mutable Skill Dependency
- Content
View full analysis
Vulnerability Details
File Locations:
README.md:5-9andSKILL.md:16-20
Vulnerability Type: Supply-chain exposure through unpinned third-party dependencies
Risk Level: MediumComplete vulnerable code snippet from
README.md:5-9:markdown ## Installation ```bash npx skills add fore-vip/acttext **Complete vulnerable code snippet from `SKILL.md:16-20`:** ```markdown ## Installation ```bash npx skills add fore-vip/acttext ### Technical Analysis The documented installation command uses `npx` to obtain and execute the npm-distributed `skills` command without pinning the CLI to a reviewed version. It also identifies the installed skill as the mutable `fore-vip/act` repository reference without specifying a release, tag, commit hash, checksum, or cryptographic signature. Consequently, the components executed or installed when a user follows the documentation can differ from the artifact audited here. A future upstream release, compromised npm package, compromised repository, or malicious modification to the repository's default branch could introduce executable code or hostile skill instructions that were not present during this audit. This is classified as an insecure dependency rather than confirmed malicious code. The reviewed project contains no embedded scripts or direct evidence that the current upstream package or repository is malicious. ### Attack Path 1. An attacker compromises the npm package used by `npx`, the upstream `fore-vip/act` repository, or an associated maintainer account. 2. The attacker publishes a modified CLI version or replaces content referenced by the mutable repository identifier. 3. A user follows the documented command: `npx skills add fore-vip/act`. 4. `npx` retrieves and executes the currently resolved CLI package, which may not be the version reviewed by the project maintainers. 5. The CLI retrieves and installs the currently resolve ...[truncated 1044 chars]- Remediation
View remediation
Remediation Suggestions
- Pin the
skillsCLI to an exact reviewed version, for example by using an exact npm version rather than allowingnpxto resolve the latest release. - Pin
fore-vip/actto an immutable commit hash or a cryptographically signed release instead of a mutable repository or default-branch reference. - Publish and verify a checksum or signature for the downloaded skill artifact before installation.
- Configure
npxso that it does not silently download and execute an unavailable package. Require explicit confirmation and document the expected package source. - Lock dependency versions and review lockfile changes before publishing updated installation instructions.
- Run installation with the minimum necessary privileges in an isolated environment. Do not use an administrator or root account.
- Add the exact audited CLI version, skill revision, expected checksums, and verification procedure to both
README.mdandSKILL.md. - Establish release signing and protected-branch controls for both the npm package and skill repository, including mandatory review and multi-factor authentication for maintainers.
- Pin the