T08 · Insecure Dependencies
Error
- Location
SKILL.md:73- Finding
Unpinned MCP Package Is Downloaded and Executed Through npx
- Content
View full analysis
``` ```json { "mcpServers": { "orderly": { "command": "npx", "args": ["@orderly.network/mcp-server@latest"] } } } ``` ```json { "mcpServers": { "orderly": { "command": "npx", "args": ["@orderly.network/mcp-server@latest"] } } } ``` ```json { "servers": { "orderly": { "command": "npx", "args": ["@orderly.network/mcp-server@latest"] } } } ``` ```json { "$schema": "https://opencode.ai/config.json", "mcp": { "orderly": { "type": "local", "command": ["npx", "@orderly.network/mcp-server@latest"], "enabled": true } } } ``` ```toml [mcp_servers.orderly] command = "npx" args = ["@orderly.network/mcp-server@latest"] ``` ### Technical Analysis The documented configurations instruct AI clients to use `npx` to retrieve and execute `@orderly.network/mcp-server@latest`. The `@latest` tag is mutable and can resolve to package contents that differ from those reviewed when this skill was published. The initial installation command is also unversioned and therefore resolves through the registry at execution time. Because these configurations are stored in MCP client configuration files, execution is not limited to a one-time setup action. A configured client may invoke the package again in later sessions. The package then runs as the current operating-system user and receives whatever filesystem, environment, network, and process access is available to that user and the hosting AI client. No malicious package contents were present in the audited artifact, and compromise of the referenced package was not establis ...[truncated 1629 chars]- Remediation
View remediation