Transitive Trust Abuse

151 findings 8 skills affected OWASP AST02: Supply Chain Compromisealso AST05also AST07

The skill extends trust to something outside itself: it pulls other skills, packages, scripts, or instructions from remote locations at runtime, so that what was reviewed is not what runs. The reviewed SKILL.md may be clean while the resource it loads is not, or changes later.

By severity

  • MEDIUM 151

By registry

RegistryFindingsSkills affected
huggingface1475
trailofbits32
sawyerhood11

How it shows up in a skill

Real findings from the corpus. Each links to the skill's full report.

hugging-face-datasets huggingface

MEDIUM TRANSITIVE TRUST ABUSE detected by YARA Transitive Trust Abusestatic

Detects skills that delegate trust to untrusted external content: run scripts

SKILL.md:13

# Scripts auto-install requirements when run with: uv run scripts/script_name.py
Remediation: Review and remove transitive trust abuse pattern

constant-time-testing trailofbits

MEDIUM TRANSITIVE TRUST ABUSE detected by YARA Transitive Trust Abusestatic

Detects skills that delegate trust to untrusted external content: Execute code

SKILL.md:162

Execute code with various inputs, measure elapsed time, and detect inconsistencies. Tests actual implementation including compiler optimizations and architecture.
Remediation: Review and remove transitive trust abuse pattern

hugging-face-evaluation huggingface

MEDIUM TRANSITIVE TRUST ABUSE detected by YARA Transitive Trust Abusestatic

Detects skills that delegate trust to untrusted external content: run scripts

SKILL.md:50

uv run scripts/evaluation_manager.py get-prs --repo-id "username/model-name"
Remediation: Review and remove transitive trust abuse pattern

hugging-face-paper-publisher huggingface

MEDIUM TRANSITIVE TRUST ABUSE detected by YARA Transitive Trust Abusestatic

Detects skills that delegate trust to untrusted external content: run scripts

SKILL.md:69

uv run scripts/paper_manager.py index \
Remediation: Review and remove transitive trust abuse pattern

How to check your own skill for this

Identify every external dependency the skill loads. Pin versions, check who controls the host, and ask whether content fetched at runtime could change after your review.

Affected skills

Name Registry Verdict SkillSpector Findings Critical High Medium Low
hugging-face-datasets huggingface ISSUES FOUND Do not install 78 78 27 0 47 4
constant-time-testing trailofbits ISSUES FOUND Caution 0 12 8 0 2 2
hugging-face-evaluation huggingface SAFE Do not install 100 96 0 0 92 4
hugging-face-paper-publisher huggingface SAFE Caution 50 54 0 0 50 4
hugging-face-model-trainer huggingface SAFE Do not install 100 14 0 0 14 0
hugging-face-jobs huggingface SAFE Do not install 67 8 0 0 5 3
dev-browser sawyerhood SAFE Do not install 100 7 0 0 4 3
testing-handbook-generator trailofbits SAFE Do not install 100 3 0 0 2 1