T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:115
- Finding
- Unpinned Code Execution Through npx and Mutable Repository Content## Vulnerability Details **File Location**: `SKILL.md:115` **Vulnerability Type**: Supply-chain exposure through unpinned executable dependencies **Risk Level**: Medium ### Vulnerable Code ```markdown - **Install source.** `npx skills add Lightprotocol/skills` installs from the public GitHub repository ([Lightprotocol/skills](https://github.com/Lightprotocol/skills)). Verify the source before running. ``` ### Technical Analysis The documented command invokes `npx`, which may retrieve and execute the currently resolved version of the `skills` npm package. It then installs Skill content from the mutable `Lightprotocol/skills` repository reference. Neither the executable npm package nor the repository content is pinned to a reviewed version, immutable commit, or integrity hash. Consequently, the code and instructions executed or installed when a user follows this command can differ from those reviewed during this audit. The warning to verify the source does not provide a concrete integrity-verification mechanism and does not prevent dependency substitution or later upstream compromise. ### Attack Path 1. An attacker compromises the npm package used by `npx`, the upstream repository, a maintainer account, or the relevant publishing workflow. 2. The attacker publishes malicious installation behavior or modifies the repository content referenced by `Lightprotocol/skills`. 3. A user follows the documented `npx skills add Lightprotocol/skills` command. 4. `npx` resolves and executes the mutable package version, which retrieves or installs the current upstream content. 5. Malicious installer code may execute with the privileges of the invoking user, or malicious Skill instructions may be installed and subsequently loaded by the agent. ### Impact Assessment Successful exploitation could permit arbitrary code execution with the invoking user's privileges during installation. Depending on the user's environment, this may expose accessible files, environment varia ...[truncated 310 chars]
- Remediation
- ## Remediation Suggestions 1. Pin the `skills` npm package to a reviewed exact version rather than allowing `npx` to resolve the latest release. 2. Pin `Lightprotocol/skills` to a reviewed immutable Git commit or signed release tag. 3. Configure `npx` to avoid implicit package installation where possible, and install the verified tool separately using a locked dependency manifest. 4. Verify package integrity using a lockfile and registry integrity hash. 5. Verify repository signatures or commit hashes before loading installed Skill content. 6. Document the exact expected package version, repository commit, and verification commands. 7. Perform installation in a restricted environment without production wallet files or sensitive environment variables. 8. Re-audit the installed files after retrieval and before loading them into an agent session.