T08 · Insecure Dependencies
Warning
- Location
SKILL.md:5- Finding
Execution of an Unpinned External CLI Implementation
- Content
View full analysis
``` ``` ### Technical Analysis The audited skill does not contain the CLI implementation. Instead, it directs the user or agent to execute `pco.ts` from a personal filesystem path and identifies a mutable external GitHub repository as its source. The external implementation is not pinned to an immutable commit, release, checksum, or cryptographic signature. Consequently, the effective code executed by the documented command can differ from the code that was originally reviewed. The invoked script would execute under the user's local privileges and may have access to the Planning Center credentials stored under `~/.config/pco-cli/config.json`. The artifact does not itself download the repository, and no malicious behavior was found in `SKILL.md`. The risk arises from delegating execution to an implementation outside the audited package whose integrity cannot be established from the available artifact. ### Attack Path 1. An attacker compromises the external repository, modifies the local `pco.ts` file, or replaces the file at the documented absolute path. 2. A user or agent follows the skill instructions and invokes: `tsx /Users/ruby/Projects/pco-cli/pco.ts `. 3. `tsx` executes the modified TypeScript implementation with the invoking user's privileges. 4. The modified implementation reads accessible files, including the configured Planning Center credentials. 5. The implementation can misuse those credentials, transmit data, or perform unauthorized API operations within the credentials' permissions. ### Impact Assessment Successful exploitation can provide arbitrary code execu ...[truncated 361 chars]- Remediation
View remediation