T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:38- Finding
Incomplete Static Audit Before Executing Remotely Retrieved Skill Code
- Content
View full analysis
# If network access fails, download and extract a tarball or ZIP. # Store the repository in a temporary staging directory. ``` ```bash # SKILL.md:43-50 # Scan SKILL.md, scripts/, and references/ for dangerous patterns. # If the skills-security-check capability is unavailable, # use the grep commands in references/audit_patterns.md. ``` The referenced scan is limited to these paths: ```bash # references/audit_patterns.md:10-15 cd grep -rniE "os\.system|subprocess|eval\(|exec\(|shutil\.rmtree|os\.remove|os\.unlink|socket\.|requests\.(get|post)|urllib|pickle\.|__import__|input\(|webbrowser|os\.environ|getenv|api_key|secret|token|password|delete|rmtree" scripts/ 2>/dev/null grep -rniE "os\.system|subprocess|eval\(|exec\(|rm -rf|curl |wget |requests\.|urllib|api_key|secret|token|password|rmtree" SKILL.md references/ 2>/dev/null ``` Downloaded code is subsequently executed: ```bash # SKILL.md:77-83 pip install -r requirements.txt -i https://pypi.tuna.tsinghua.edu.cn/simple py_compile scripts/*.py bash run_script.sh- Remediation
View remediation