Skill pack from unknown registry

skill-pack-from-unknown-registry

Severity

high (catalogue Medium; platform severity model has no 'medium')

Remediation Complexity

trivial

Remediation Risk

low

Remediation Effort

low

OWASP LLM

LLM03:2025 — Supply Chain

OWASP ASI

ASI04:2026 (secondary ASI10:2026)

OWASP AST

AST02:2026 (secondary AST01:2026)

Family

LLM03 — Supply Chain

Red-team vectors

Supply Chain

Description

A skill pack declares an origin registry that is not in the trusted skill-registry allowlist, or its origin is explicitly unverified (verified: false). A skill ships agent behaviour; installing one from an unvetted source is a supply-chain door with no SCA rule behind it.

The trusted verdict comes from the bundled trusted-source pack plus the per-scan --skill-registry-allowlist extension.

Examples

origin:
  registry: random-marketplace.example
  verified: false        (1)

1	Registry outside the allowlist and origin unverified — flagged.

A skill from an allowlisted, verified registry produces no finding.

Mitigation / Fix

Install skills only from trusted registries; extend --skill-registry-allowlist for approved internal registries.
Prefer pinned, signed skill sources; reject unverified origins.