T08 · Insecure Dependencies
Warning
- Location
- README.md:19
- Finding
- Unpinned Package Execution Through npx<![CDATA[ ## Vulnerability Details **File Location**: `README.md`, lines 19–22 **Vulnerability Type**: `T08: Insecure Dependencies` **Risk Level**: Medium ### Vulnerable Code ```markdown Via ClawHub: ```bash npx clawhub install abishekdharshan/zerion-api ``` ``` ### Technical Analysis The documented installation command invokes `clawhub` through `npx` without specifying a reviewed package version or verifying package integrity. If the package is not already available locally, `npx` may retrieve the currently published version from the configured package registry and execute its CLI code. Because the package reference is mutable, the code executed by future users may differ from the version that existed when this skill was reviewed. The project provides no lockfile, checksum, package signature, or other provenance control for this command. A compromise of the `clawhub` package, its publisher account, or the relevant distribution channel could therefore turn the installation step into a supply-chain execution vector. The audited repository itself contains only Markdown documentation; no malicious package behavior or compromise was observed. Exploitation depends on an external package or distribution-path compromise. ### Attack Path 1. An attacker compromises the `clawhub` package, its publisher account, or a package-distribution path used by the victim. 2. The attacker publishes or serves a modified package version containing malicious CLI or lifecycle code. 3. A user follows the documented unpinned `npx clawhub install ...` command. 4. `npx` retrieves the mutable package release without a project-specified version or integrity check. 5. The malicious package code executes under the account and environment used to run the installation command. 6. The payload can access resources available to that user and may tamper with the installed skill or related configuration. ### Impact Assessment Successful exploitation could permit arbitrary code execution wit ...[truncated 599 chars]
- Remediation
- <![CDATA[ ## Remediation Suggestions 1. Pin `clawhub` to an explicitly reviewed version instead of relying on the current registry release: ```bash npx clawhub@<reviewed-version> install abishekdharshan/zerion-api ``` 2. Prefer installing the dependency through a lockfile-controlled workflow and invoke the verified local binary afterward. 3. Verify package provenance, registry identity, integrity hashes, and signatures where supported before execution. 4. Avoid running installation commands as `root`, with `sudo`, or from an account holding unrelated sensitive credentials. 5. Execute third-party installers in a restricted environment with minimal filesystem, network, and credential access. 6. Document the tested package version and update it only after security review. ]]>