T08 · Insecure Dependencies
Warning
- Location
README_EN.md:115- Finding
Unpinned Installation Command and Unverified Alternate Distribution Source
- Content
View full analysis
Vulnerability Details
File Location:
README_EN.md:115-121
Vulnerability Type: Unpinned third-party installation and unverified remote artifact
Risk Level: MediumVulnerable Code Snippet
markdown ## Quick Start ```bash npx skills add alchaincyf/darwin-skillAfter installation, tell your agent: "optimize all skills" or "optimize [skill-name]". Works with any tool that supports the SKILL.md format.
Can't access GitHub? Download the zip: darwin-skill.zip. Extract and place SKILL.md in
~/.claude/skills/darwin-skill/.text Equivalent instructions also appear in `README.md:113-119`. ### Technical Analysis The `npx` command does not pin the `skills` installer to a specific version or immutable package digest. Consequently, the command can retrieve and execute a version that differs from the one available when this project was audited. The alternate ZIP is hosted at a mutable Cloudflare R2 URL. The documentation provides no SHA-256 digest, signature, immutable release identifier, or verification procedure. The integrity of content subsequently downloaded from that address therefore cannot be established from the audited repository. The audited files do not contain a malicious dependency or payload. The vulnerability is the supply-chain trust model: compromise of a package publisher, distribution account, DNS path, or storage object could replace the reviewed content with an altered installer or Skill package. ### Attack Path 1. An attacker compromises the package publishing account, the repository/distribution account, or the mutable R2 object. 2. The attacker publishes an altered installer or replaces the downloadable ZIP. 3. A user follows the documented Quick Start without pinning or integrity verification. 4. `npx` retrieves and executes the changed package, or the user installs the modified ZIP into the A ...[truncated 899 chars]- Remediation
View remediation
Remediation Suggestions
- Pin the
skillsinstaller to an explicitly reviewed version rather than relying on the latest package:bash npx skills@<reviewed-version> add alchaincyf/darwin-skill@<immutable-version-or-commit> - Prefer signed, versioned releases hosted through the authoritative repository.
- Publish a SHA-256 digest for every downloadable archive and require verification before extraction.
- Sign release artifacts with Sigstore, GPG, or an equivalent verifiable signing mechanism.
- Use immutable, version-specific artifact URLs rather than a reusable ZIP path.
- Document the expected package name, version, commit hash, checksum, and signer identity.
- Advise users to inspect downloaded Skill contents and installer lifecycle scripts before installation.
- Keep the English and Chinese installation instructions synchronized so both use the same pinned and verified process.
- Pin the