T08 · Insecure Dependencies
Warning
- Location
SKILL.md:52- Finding
Unpinned Third-Party Package Receives Credential and Script-Execution Authority
- Content
View full analysis
=1.4.9"], "mcp": ["mgc"] }, ``` ### Technical Analysis The Skill directs users to install and execute `mgc-blackbox` without pinning an exact reviewed version or validating package integrity. The manifest permits version 1.4.9 and every compatible future release. Running `pip install` may execute package-controlled installation logic, while launching `mgc` executes the installed package under the user's account. This dependency occupies a particularly sensitive trust position. According to the Skill documentation, MGC stores plaintext webhook credentials internally, retrieves those credentials at runtime, and executes stored Python sender scripts. A compromised package release, package-index account, or upstream distribution channel could therefore access credentials and execute code with the invoking user's privileges. The audit found no evidence that the currently referenced package is malicious. The vulnerability is the absence of version and integrity controls around a dependency granted access to credentials and local code execution. ### Attack Path 1. An attacker compromises the upstream package, maintainer account, or package distribution channel. 2. The attacker publishes a malicious release satisfying `mgc-blackbox>=1.4.9`, or replaces the version resolved by the unpinned installation command. 3. A user follows the Skill instructions and runs `pip install mgc-blackbox`. 4. Package installation or subsequent execution of `mgc` runs attacker-controlled code under the user's account ...[truncated 917 chars]- Remediation
View remediation