T08 · Insecure Dependencies
- Location
SKILL.md:113- Finding
Unpinned Runtime Installation of a Third-Party Dependency
- Content
View full analysis
Vulnerability Details
File Location:
SKILL.md, lines 113 and 128
Vulnerability Type: Unpinned third-party dependency installation
Risk Level: MediumVulnerable Code
markdown > **Path note**: `scripts/generate_pptx.py` is relative to the Skill directory. Change to the Skill directory first or use its absolute path. The script depends on `python-pptx`; install it on first use: `pip3 install python-pptx`.bash pip3 install python-pptxTechnical Analysis
The Skill directs users to install
python-pptxwithout specifying a reviewed version, cryptographic hashes, a lockfile, an isolated environment, or an explicitly trusted package index. Consequently, pip resolves the current package and transitive dependency versions from the user's configured index at installation time.The effective dependency set can therefore change after the Skill has been audited. Exploitation would require compromise or malicious manipulation of an applicable package release, transitive dependency, package repository, or user-configured pip index. This is a supply-chain exposure rather than evidence that the currently published
python-pptxpackage is malicious.Attack Path
- An attacker compromises an applicable dependency release or controls a package source configured in the victim's pip environment.
- A user activates the Skill on a system where the dependency is not installed.
- The user follows the documented
pip3 install python-pptxinstruction. - Pip resolves and downloads mutable, unverified package artifacts and transitive dependencies.
- Malicious installation or imported package code executes under the account running pip or the presentation generator.
- The malicious code can act with that account's filesystem and network permissions.
Impact Assessment
Successful exploitation could provide arbitrary code execution with the privileges of the user performing the installati ...[truncated 315 chars]
- Remediation
View remediation
Remediation Suggestions
- Pin
python-pptxand every transitive dependency to reviewed versions. - Provide a lock or requirements file containing cryptographic hashes, for example:
bash python3 -m venv .venv . .venv/bin/activate python3 -m pip install --require-hashes -r requirements.txt - Generate the hash-locked dependency file from a controlled build environment and review updates before publishing them.
- Document the expected trusted package index and disable unintended extra indexes to reduce dependency-confusion exposure.
- Explicitly advise users not to install dependencies with root or administrator privileges.
- Consider distributing the Skill in a reproducible, isolated environment with dependencies installed and verified during a controlled build stage.
- Pin