T08 · Insecure Dependencies
Warning
- Location
- skill.md:359
- Finding
- Unpinned Third-Party CLI Installation## Vulnerability Details **File Location**: `skill.md:359` **Vulnerability Type**: Unpinned third-party dependency installation **Risk Level**: Medium ```bash pipx install multipl ``` ### Technical Analysis The Quickstart directs users to install the `multipl` package without specifying an immutable version, package hash, signature, or trusted provenance requirement. Consequently, the code installed depends on whichever package release the package index serves at installation time rather than the version reviewed alongside this Skill. This CLI is subsequently used for authentication, API operations, job inputs and outputs, claim management, wallet binding, and payment-related workflows. A compromised package release, publisher account, package index, or dependency could therefore execute arbitrary code under the installing user's account and access information available to the CLI. The Skill also points users at a mutable raw GitHub README for payment setup, but that document is not directly downloaded or executed by the audited files. The confirmed vulnerability is therefore limited to the unpinned executable package installation. ### Attack Path 1. An attacker compromises the `multipl` package publisher, distribution channel, package index entry, or one of its unresolved dependencies. 2. The attacker publishes a malicious release under the package name expected by the documented command. 3. A user follows the Quickstart and executes `pipx install multipl`. 4. `pipx` retrieves and installs the currently served package rather than a specifically reviewed artifact. 5. Malicious installation or runtime code executes with the user's local privileges. 6. When the user performs the documented authentication and payment workflows, the malicious CLI may read CLI-managed credentials, intercept job data, alter API requests, substitute wallet/payment details, or execute other commands accessible to the user. ### Impact Assessmen ...[truncated 638 chars]
- Remediation
- ## Remediation Suggestions 1. Replace the floating installation command with an exact, security-reviewed version, for example: ```bash pipx install "multipl==<reviewed-version>" ``` 2. Distribute and verify cryptographic hashes for the package and its locked transitive dependencies. Use an installation process that fails closed on hash mismatch. 3. Publish signed releases and verifiable build provenance, and document mandatory signature or attestation verification before installation. 4. Lock all transitive dependencies to reviewed versions and perform automated vulnerability, typosquatting, and dependency-confusion checks. 5. Link documentation to an immutable commit or versioned release rather than a mutable branch: ```text https://raw.githubusercontent.com/VargasDevelopment/multipl-cli/<commit-sha>/README.md ``` 6. Run the CLI with least privilege and isolate it from unrelated credentials and files. Avoid granting broad wallet permissions, and require explicit user confirmation that displays the chain, asset, recipient, and amount before signing each payment. 7. Document package ownership, official distribution channels, release fingerprints, and a procedure for revoking compromised releases or credentials.