T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:14
- Finding
- Unpinned Third-Party Dependency Used for Financial and Wallet Operations## Vulnerability Details **File Location**: `SKILL.md`, lines 14–18 **Vulnerability Type**: `T08: Insecure Dependencies` **Risk Level**: Medium **Complete Code Snippet**: ```bash pip install agentns-client # For Solana wallet support: pip install agentns-client[solana] ``` ### Technical Analysis The installation instructions retrieve and execute the latest available version of `agentns-client` from PyPI without an exact version constraint, cryptographic hash verification, or a project lockfile. The repository contains no bundled implementation with which to audit the installed package. The dependency is subsequently entrusted with sensitive operations, including creating or loading cryptocurrency wallets, signing authentication messages, processing registrant contact information, making automatic USDC payments, and modifying DNS records. Because the installed artifact can change independently of this reviewed skill, a compromised package release or distribution account could introduce arbitrary code into these high-value workflows. No evidence establishes that the currently published dependency is malicious. The confirmed issue is the absence of reproducible, integrity-verified dependency installation. ### Attack Path 1. An attacker compromises the package publisher account, package repository, release process, or another relevant supply-chain component. 2. The attacker publishes a modified release under the expected `agentns-client` package name. 3. A user follows the documented unpinned installation command and receives the attacker-controlled release. 4. The user imports and invokes the package for wallet creation, authentication, registration, payment, or DNS administration. 5. Malicious package code executes in the user's Python environment and may access information or capabilities exposed during those operations. 6. The package could exfiltrate wallet material or registrant data, redirect transactions, init ...[truncated 827 chars]
- Remediation
- ## Remediation Suggestions 1. Pin `agentns-client` and its optional Solana extra to an exact, security-reviewed version. 2. Publish a lockfile or constraints file covering all transitive dependencies. 3. Provide SHA-256 hashes and require installation with hash verification, such as `pip install --require-hashes`. 4. Verify that the reviewed source repository and the distributed PyPI artifact are reproducibly linked. 5. Automate dependency vulnerability, provenance, and package-integrity checks in the release process. 6. Run the client in an isolated virtual environment or container with minimal filesystem and network permissions. 7. Use a dedicated, low-balance wallet rather than a wallet holding unrelated assets. 8. Require explicit user confirmation of the amount, destination, network, and domain before each payment. 9. Protect wallet files with restrictive filesystem permissions and avoid storing them in shared project directories. 10. Document package provenance and a controlled upgrade procedure requiring review before changing the pinned version.