Supply Chain Attack

17 findings 3 skills affected OWASP AST02: Supply Chain Compromisealso AST01also AST07

The skill's installation or setup path is itself the attack surface: fetching an archive or package and executing its contents, installing from an unpinned or unverified source, or depending on a third-party distribution channel an attacker could poison. Distinct from transitive trust abuse in that the risk is in how the skill is delivered and installed, not in what it loads afterwards.

By severity

LOW 17

By registry

Registry	Findings	Skills affected
heygen-com	16	2
K-Dense-AI	1	1

How it shows up in a skill

Real findings from the corpus. Each links to the skill's full report.

frost-sequence-camera-orbit heygen-com

LOW Unpinned dependency Supply Chain Attackstatic

Dependency 'opentype.js' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).

source/package.json:10

"opentype.js": "^2.0.0"

Remediation: Pin the dependency to an exact version (e.g. '"package": "1.2.3"').

remotion-to-hyperframes heygen-com

LOW Unpinned dependency Supply Chain Attackstatic

Dependency '@remotion/cli' has no exact version. Unpinned dependencies in a skill package allow a later, potentially malicious release to be installed automatically (supply-chain risk).

assets/test-corpus/tier-1-title-card/remotion-src/package.json:9

"@remotion/cli": "^4.0.0"

Remediation: Pin the dependency to an exact version (e.g. '"package": "1.2.3"').

mageck K-Dense-AI

LOW Archive extraction followed by execution Supply Chain Attackpipeline

An archive is extracted and its contents are then executed. This pattern can deliver and run malicious payloads hidden in archives. (found in documentation — may be instructional)

references/runtime.md:15

uv venv --python 3.11 mageck-env
uv pip install --python mageck-env/bin/python numpy==1.26.4 scipy==1.13.1 setuptools==69.5.1
curl -fL 'https://sourceforge.net/projects/mageck/files/0.5/mageck-0.5.9.5.tar.gz/download' -o mageck.tar.gz
tar -xzf mageck.tar.gz
# This archive contains liulab-mageck-c491

Remediation: Review the command sequence for potential multi-step attacks. Ensure all steps are necessary and safe.

How to check your own skill for this

Follow the install steps literally. Anything that downloads then extracts or executes, installs from a mutable tag or branch, or pulls from a registry without an integrity check is the finding. Pin to a commit or checksum and vendor the script where possible.

Affected skills

Name	Registry	Verdict	SkillSpector	Findings	Critical	Medium	Low
frost-sequence-camera-orbit	heygen-com	ISSUES FOUND	Do not install 99	13	3	4	5
remotion-to-hyperframes	heygen-com	SAFE	Do not install 71	17	0	3	13
mageck	K-Dense-AI	SAFE	Caution 20	3	0	2	1