T08 · Insecure Dependencies
Warning
- Location
SKILL.md:10- Finding
Execution of an Unverified External Validator
- Content
View full analysis
/.groundcrew/groundcrew-doctor.py --evidence ` before using them in a conclusion. ``` ### Technical Analysis The Skill directs the agent to locate and execute `groundcrew-doctor.py` from an external “active skills root.” This executable is not included in the audited project, and the instruction does not require verification of its provenance, version, cryptographic integrity, ownership, permissions, canonical path, or symlink status. Consequently, the code executed at runtime is determined by the contents of another directory outside this package's reviewed trust boundary. A malicious or compromised skills installation could replace the expected validator with attacker-controlled Python code while retaining the legitimate-looking filename and path. This is an insecure supply-chain dependency rather than confirmed embedded malware: the audited project does not itself contain the referenced executable, and no malicious implementation was observed. Exploitation therefore depends on an attacker being able to influence the selected skills root or replace the validator within it. ### Attack Path 1. An attacker gains the ability to create or modify `.groundcrew/groundcrew-doctor.py` beneath a directory that may be selected as the active skills root. This could occur through a compromised Skill bundle, unsafe installation process, writable shared directory, or lo ...[truncated 1303 chars]- Remediation
View remediation