T08 · Insecure Dependencies
Warning
- Location
references/self-verify.md:98- Finding
Unpinned packages may be downloaded and executed through npx
- Content
View full analysis
--only-categories=accessibility --output=html --output-path=./a11y-report.html --chrome-flags="--headless" ``` ```bash # Desktop npx playwright-core screenshot ~/verify.png --viewport-size=1440,900 # iPhone 16 Pro npx playwright-core screenshot ~/verify-iphone.png --viewport-size=393,852 # Pixel 8 npx playwright-core screenshot ~/verify-android.png --viewport-size=412,915 # HarmonyOS Mate 60 npx playwright-core screenshot ~/verify-harmony.png --viewport-size=396,858 ``` ### Technical Analysis The verification workflow instructs users to invoke `lighthouse` and `playwright-core` through `npx` without specifying exact versions. The repository does not contain a package manifest or lockfile establishing reviewed versions of these tools. When the requested package is unavailable locally, `npx` can retrieve and execute a package from the configured npm registry. Consequently, the code executed during verification is not necessarily the same code that existed when this Skill was audited. Package compromise, registry compromise, a malicious registry configuration, or a future package release containing unsafe behavior could therefore turn a routine verification command into local code execution. The package names are legitimate and there is no evidence that the Skill intentionally selects malicious dependencies. The issue is the mutable, unverified dependency resolution process. ### Attack Path 1. A user follows the Skill's accessibility or screenshot verification instructions. 2. The requested package is not already installed in a locked local dependency tree. 3. `npx` resolves the unversioned packa ...[truncated 1106 chars]- Remediation
View remediation
... npx --yes playwright@ ... ``` 5. Document the expected npm registry and use package-integrity verification, dependency review, and automated vulnerability scanning. 6. Run browser-verification tools in a restricted environment without production credentials or unrelated sensitive files. ]]>