{"vulnerability": "GHSA-74P7-6H78-GW8P", "sightings": [{"uuid": "3000313c-94c0-435d-84db-52e646c1d053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-74P7-6H78-GW8P", "type": "seen", "source": "https://gist.github.com/alon710/11eb496838c824b891dd239de0d0e0b4", "content": "# GHSA-74P7-6H78-GW8P: GHSA-74P7-6H78-GW8P: Multiple Critical Security Flaws in skillctl Agent-Skill Manager\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-06-22\n> **Full Report:** https://cvereports.com/reports/GHSA-74P7-6H78-GW8P\n\n## Summary\nAn in-depth security audit of the skillctl command-line package manager revealed five critical and high-severity security vulnerabilities. The identified flaws span parameter-level command argument injection via the source_sha parameter, uncontrolled resource consumption (Denial of Service) through unnamed UNIX FIFOs and character devices, directory path traversal in the destination argument, commit-message trailer forgery via newline injection in skill names, and local credential exfiltration leveraging UNIX hardlinks. These vulnerabilities represent significant vectors for workstation compromise when executing agentic tasks in repositories containing untrusted files or pull requests. Remediation was introduced in version v0.1.3.\n\n## TL;DR\nMultiple critical vulnerabilities in skillctl allow malicious repositories to perform argument injection, system-wide directory deletion, persistent denial of service, commit forgery, and credential exfiltration when processed by AI developer agents.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-88, CWE-400, CWE-22, CWE-93, CWE-59\n- **Attack Vector**: Local / Social Engineering via Malicious Repository Configuration\n- **CVSS v3.1**: 8.6 (High)\n- **Exploit Status**: Proof of Concept (PoC) available in official test suite\n- **Impact**: Command Execution, Directory Deletion, Denial of Service, Local Secret Exfiltration\n- **Remediation Status**: Patched in version v0.1.3\n\n## Affected Systems\n\n- skillctl\n- **skillctl**: < v0.1.3 (Fixed in: `v0.1.3`)\n\n## Mitigation\n\n- Upgrade skillctl immediately to version v0.1.3 or later to apply the validation and resolution fixes.\n- Avoid running skillctl or autonomous agents inside directories mapped from untrusted pull requests.\n- Review skill definitions and configuration files (.skills.toml) manually before execution.\n\n**Remediation Steps:**\n1. For systems running skillctl via python package managers, execute: pip install --upgrade skillctl\n2. For Rust cargo environments, run: cargo install skillctl --force\n3. Validate the local skill configuration using local sanitization scripts to look for non-hex values in source_sha keys.\n\n## References\n\n- [GitHub Security Advisory GHSA-74P7-6H78-GW8P](https://github.com/advisories/GHSA-74P7-6H78-GW8P)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-74P7-6H78-GW8P) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-23T13:42:51.000000Z"}, {"uuid": "b78eb164-dbae-4a30-ac28-9459b47f1ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-74P7-6H78-GW8P", "type": "seen", "source": "https://gist.github.com/alon710/ba15b4769d69aa0e2cc9924898cce4e0", "content": "# GHSA-74P7-6H78-GW8P: GHSA-74P7-6H78-GW8P: Multiple Critical Security Flaws in skillctl Agent-Skill Manager\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-06-22\n> **Full Report:** https://cvereports.com/reports/GHSA-74P7-6H78-GW8P\n\n## Summary\nAn in-depth security audit of the skillctl command-line package manager revealed five critical and high-severity security vulnerabilities. The identified flaws span parameter-level command argument injection via the source_sha parameter, uncontrolled resource consumption (Denial of Service) through unnamed UNIX FIFOs and character devices, directory path traversal in the destination argument, commit-message trailer forgery via newline injection in skill names, and local credential exfiltration leveraging UNIX hardlinks. These vulnerabilities represent significant vectors for workstation compromise when executing agentic tasks in repositories containing untrusted files or pull requests. Remediation was introduced in version v0.1.3.\n\n## TL;DR\nMultiple critical vulnerabilities in skillctl allow malicious repositories to perform argument injection, system-wide directory deletion, persistent denial of service, commit forgery, and credential exfiltration when processed by AI developer agents.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-88, CWE-400, CWE-22, CWE-93, CWE-59\n- **Attack Vector**: Local / Social Engineering via Malicious Repository Configuration\n- **CVSS v3.1**: 8.6 (High)\n- **Exploit Status**: Proof of Concept (PoC) available in official test suite\n- **Impact**: Command Execution, Directory Deletion, Denial of Service, Local Secret Exfiltration\n- **Remediation Status**: Patched in version v0.1.3\n\n## Affected Systems\n\n- skillctl\n- **skillctl**: < v0.1.3 (Fixed in: `v0.1.3`)\n\n## Mitigation\n\n- Upgrade skillctl immediately to version v0.1.3 or later to apply the validation and resolution fixes.\n- Avoid running skillctl or autonomous agents inside directories mapped from untrusted pull requests.\n- Review skill definitions and configuration files (.skills.toml) manually before execution.\n\n**Remediation Steps:**\n1. For systems running skillctl via python package managers, execute: pip install --upgrade skillctl\n2. For Rust cargo environments, run: cargo install skillctl --force\n3. Validate the local skill configuration using local sanitization scripts to look for non-hex values in source_sha keys.\n\n## References\n\n- [GitHub Security Advisory GHSA-74P7-6H78-GW8P](https://github.com/advisories/GHSA-74P7-6H78-GW8P)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-74P7-6H78-GW8P) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-23T13:51:48.000000Z"}]}