T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:15
- Finding
- Unpinned Third-Party Skill Installation Through npx## Vulnerability Details **File Location**: `SKILL.md:15-18`, `SKILL.md:28-35`, `SKILL.md:66-70`, `SKILL.md:75-86` **Vulnerability Type**: Supply-chain risk from mutable external dependencies **Risk Level**: Medium ### Vulnerable Code `SKILL.md:15-18`: ```markdown | Skill | Description | Install | | --- | --- | --- | | `audio-prompting` | Use when crafting TTS, music, or bed prompts for any generative audio model — director style, song structure, and post-production layering. | `npx skills add PrunaAI/pruna-skills@audio-prompting -y` | | `generation-diversity` | Use when writing any generative prompt — ritual seed, explicit structure, scenario axes, and quality gates before paid API calls. | `npx skills add PrunaAI/pruna-skills@generation-diversity -y` | ``` `SKILL.md:75-86`: ```markdown | Skill | Description | Install | | --- | --- | --- | | `gemini-3.1-flash-tts` | Use when someone needs spoken narration or voiceover — explainer tracks, documentary lines, or voice to pair with generated video. | `npx skills add PrunaAI/pruna-skills@gemini-3.1-flash-tts -y` | | `music-2.5` | Use when someone wants an original AI song with vocals — sung lyrics, a style prompt track, or source audio for a music video. | `npx skills add PrunaAI/pruna-skills@music-2.5 -y` | | `stable-audio-2.5` | Use when someone wants light instrumental background music — an ambient bed under dialogue or underscore for reels and explainers. | `npx skills add PrunaAI/pruna-skills@stable-audio-2.5 -y` | | `whisperx` | Use when someone needs word-level timestamps from audio — lyric alignment, cut-safe line boundaries, or caption source timing before burn-in with video-editing. | `npx skills add PrunaAI/pruna-skills@whisperx -y` | | `p-video-2` | Use when someone wants the best-quality short clip from text, images, or audio — polished B-roll, start/end frame animation, or a motion shot with stronger lip-sync. Not for full multi-scene films or talking-head-o ...[truncated 2920 chars]
- Remediation
- ## Remediation Suggestions 1. Pin the `skills` CLI to an explicitly reviewed version rather than allowing `npx` to resolve its current release. 2. Pin every external skill to an immutable commit hash, signed release, or content-addressed artifact. 3. Record and verify cryptographic integrity hashes or signatures before installation. 4. Remove `-y` so that installation requires an explicit user confirmation and review checkpoint. 5. Avoid recommending installation of the full suite when only one component is required; install the smallest necessary dependency set. 6. Review the complete dependency tree, installation lifecycle scripts, and skill instructions before approving a version. 7. Run installation in a sandbox or least-privileged environment without production credentials or sensitive mounted directories. 8. Maintain a lock file or allowlist documenting approved CLI versions, skill revisions, source repositories, and integrity values.