T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:60
- Finding
- Unpinned External Skill Installation Through npx## Vulnerability Details **File Location**: `SKILL.md`, lines 60–70 **Vulnerability Type**: Supply-chain risk from unpinned external dependencies **Risk Level**: Medium ### Vulnerable Code ```markdown | `image-prompting` | Use when crafting still-image prompts for any generative model — composition, identity sheets, edits, try-on, and photoreal personas. | `npx skills add PrunaAI/pruna-skills@image-prompting -y` | | `video-prompting` | Use when crafting video or motion prompts for any generative model — dramaturgy, camera, physics-safe motion, frame anchors, and clip chaining. | `npx skills add PrunaAI/pruna-skills@video-prompting -y` | | `audio-prompting` | Use when crafting TTS, music, or bed prompts for any generative audio model — director style, song structure, and post-production layering. | `npx skills add PrunaAI/pruna-skills@audio-prompting -y` | | `pruna-api` | Use before any Pruna or Replicate HTTP call — credentials, upload/poll/download, parallel batches, and agent safety. | `npx skills add PrunaAI/pruna-skills@pruna-api -y` | | `p-image-ideogram` | Use when photo generation needs more control — photoreal results, text in the image, or structured JSON with hex colors and bounding boxes. Simpler photo generation, edits, and video use other skills in the suite. | `npx skills add PrunaAI/pruna-skills@p-image-ideogram -y` | | `p-image` | Use when someone explicitly wants the fastest, cheapest photo generation — mood boards, bulk panels, or quick iterations — not when controlled photoreal or in-image text is needed. | `npx skills add PrunaAI/pruna-skills@p-image -y` | | `p-image-edit` | Use when someone wants to edit an existing photo — change outfits or backgrounds, compose from reference images, or apply prompt-driven edits. | `npx skills add PrunaAI/pruna-skills@p-image-edit -y` | | `p-video-2` | Use when someone wants the best-quality short clip from text, images, or audio — polished B-roll, start/end frame animation, or a ...[truncated 3317 chars]
- Remediation
- ## Remediation Suggestions 1. Pin the `skills` CLI to an exact audited version, for example by using an exact package version rather than allowing `npx` to resolve the latest release. 2. Pin external Skill sources to immutable commit hashes or signed release artifacts instead of mutable names or tags. 3. Record and verify cryptographic checksums or signatures before installation. 4. Remove `-y`, or require explicit informed user confirmation before downloading and installing external components. 5. Vendor security-critical dependencies, particularly API and credential-handling Skills, into a reviewable package where licensing permits. 6. Execute installation in a sandbox with restricted filesystem, environment-variable, credential, and network access. 7. Maintain a reviewed allowlist of approved package versions and repository commits. 8. Re-audit external dependencies whenever their pinned versions are updated.