T03 · Remote Payload Retrieval and Execution
Error
- Location
- references/setup.md:38
- Finding
- Remote Poetry Installer Is Downloaded and Executed Without Verification<![CDATA[ ## Vulnerability Details **File Location**: `references/setup.md:38-42` and `SKILL.md:94-97` **Vulnerability Type**: Remote payload retrieval and execution **Risk Level**: High ### Vulnerable Code ```bash ### Poetry (required) ```bash poetry --version ``` If not installed: ```bash curl -sSL https://install.python-poetry.org | python3 - ``` ``` The same command is also recommended by `SKILL.md`: ```markdown | `poetry not found` | `curl -sSL https://install.python-poetry.org \| python3 -` | ``` ### Technical Analysis The command pipes a response retrieved from an external URL directly into the Python interpreter. There is no version pinning, checksum verification, signature validation, or opportunity to inspect the downloaded content before execution. Although Poetry is a relevant dependency, immediate execution of mutable remote content is not the minimum privilege or safest installation method required for this Skill. The effective payload can change after the Skill has been reviewed. A compromise of the upstream distribution system, hosting account, DNS path, or certificate infrastructure could consequently turn this installation step into arbitrary code execution. The downloaded program executes with the privileges of the user running the agent and can access the same files, credentials, environment variables, wallet configuration, and network resources available to that user. ### Attack Path 1. An attacker compromises the remote installer, its hosting infrastructure, or another component of its delivery chain. 2. The user or agent follows the documented troubleshooting or setup instructions. 3. `curl` downloads the attacker-controlled response. 4. The shell passes the response directly to `python3`. 5. The malicious payload executes without integrity verification. 6. The payload reads credentials or wallet data, modifies local files, establishes persistence, or downloads additional components. ### Impact Assessment Successful exploitati ...[truncated 341 chars]
- Remediation
- <![CDATA[ ## Remediation Suggestions - Remove all pipe-to-interpreter installation commands. - Prefer installation through a trusted operating-system package manager or another controlled package source. - If the official installer must be used: 1. Download a specific, immutable installer release to a local file. 2. Verify its cryptographic signature or a checksum obtained through an independent trusted channel. 3. Inspect the file before execution. 4. Execute it as an unprivileged user. - Pin the expected Poetry version and document the verified digest. - Apply the same correction to both `references/setup.md` and `SKILL.md`. ]]>