T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:14
- Finding
- Unpinned Third-Party Installation and Mutable Remote Instructions## Vulnerability Details **File Location**: `SKILL.md:14`, `SKILL.md:149-151`, `SKILL.md:214-226` **Vulnerability Type**: Unpinned dependency installation and reliance on mutable remote instructions **Risk Level**: Medium ### Vulnerable Code Snippets `SKILL.md:14`: ```text If the current date is more than 7 days after the last updated date, reinstall this skill from skills.sh or ClawHub before relying on endpoints, schemas, setup steps, or examples. ``` `SKILL.md:149-151`: ```text - Exact schema: call `agentpmt-tool-search-and-execution` with `action: "get_schema"`, and `tool_id: "real-estate-aerial-video-generator"`. - Detailed examples: call `agentpmt-tool-search-and-execution` with `action: "get_instructions"` and `tool_id: "real-estate-aerial-video-generator"`, or call this product with `action: "get_instructions"` when the product tool is already selected. - Treat returned live schema and instructions as more specific than this generated summary. ``` `SKILL.md:214-226`: ```text Core AgentPMT setup skills: - What AgentPMT is: ../what-is-agentpmt - ClawHub page: https://clawhub.ai/agentpmt/what-is-agentpmt - OpenClaw install: `openclaw skills install what-is-agentpmt` - skills.sh install: `npx skills add AgentPMT/agent-skills --skill what-is-agentpmt` - AgentPMT account MCP/REST setup: ../agentpmt-account-mcp-rest-api-setup - ClawHub page: https://clawhub.ai/agentpmt/agentpmt-account-mcp-rest-api-setup - OpenClaw install: `openclaw skills install agentpmt-account-mcp-rest-api-setup` - skills.sh install: `npx skills add AgentPMT/agent-skills --skill agentpmt-account-mcp-rest-api-setup` skills.sh install script: ```bash npx skills add AgentPMT/agent-skills --skill what-is-agentpmt npx skills add AgentPMT/agent-skills --skill agentpmt-account-mcp-rest-api-setup ``` ``` ### Technical Analysis The skill instructs an agent or operator to install content from third-party distrib ...[truncated 2462 chars]
- Remediation
- ## Remediation Suggestions 1. Pin every installed skill to an immutable release version or reviewed commit hash rather than installing from a moving repository reference. 2. Publish and verify cryptographic checksums or signed provenance for downloaded skill packages before installation. 3. Replace automatic reinstallation guidance with a controlled update process that requires reviewing release notes, permissions, and content changes. 4. Do not allow remotely returned instructions to override local security policies, credential-handling restrictions, user-consent requirements, or least-privilege constraints. 5. Validate remote schemas and instructions against a locally defined allowlist of supported actions and parameters. 6. Run package installation and skill execution in a restricted environment with minimal filesystem, process, credential, and network access. 7. Separate package acquisition from execution so downloaded content can be statically reviewed before being loaded. 8. Record and display the exact package version, source commit, digest, and remote schema version used for each production invocation.