T09 · Insecure Skill Coding Practices
Error
- Location
scripts/create-market-with-odds.sh:35- Finding
Arbitrary Python Code Execution Through estimated_prob Argument
- Content
View full analysis
/dev/null; then echo "Error: estimated_prob must be between 0.01 and 0.99 (got: $EST_PROB)" exit 1 fi ``` ### Technical Analysis The attacker-controlled `EST_PROB` shell argument is interpolated directly into source code supplied to `python3 -c`. Shell quoting does not make this safe because the resulting value becomes part of the Python program rather than data passed to that program. An argument containing a closing quote and additional Python statements can terminate the intended `float()` expression and inject arbitrary Python code. The injected statement executes while validation is being performed. It can execute even if the subsequent assertion fails and the script exits. This violates the code/data separation required for safe interpreter invocation. Numeric validation occurs only after the untrusted value has already been interpreted as executable Python. ### Attack Path 1. An attacker influences the fourth argument passed to `create-market-with-odds.sh`. 2. The argument is constructed to close the single-quoted Python string and append a Python statement. 3. Bash substitutes the crafted value into the multiline `python3 -c` program. 4. Python parses the attacker-supplied content as source code. 5. The injected code executes with the permissions of the user running the Skill. 6. The code can read `~/secrets/moltmarkets-api-key`, modify user-accessible files, launch subprocesses, or make authenticated API requests. ### Impact Assessment Successful exploitation provides arbitrary code execution under the invoking user's account. The resulting process can access all files and services available to tha ...[truncated 420 chars]- Remediation
View remediation
&2 exit 1 fi ``` Additional hardening should include: - Perform strict shell-level syntax validation before invoking Python, such as accepting only a documented decimal format. - Pass all external values through positional arguments, standard input, or environment variables and never concatenate them into interpreter source. - Add regression tests containing quotes, semicolons, newlines, backslashes, and Python syntax. - Run the trading scripts under a dedicated, minimally privileged account whose credential can perform only required API operations. ]]>