T08 · Insecure Dependencies
Error
- Location
scripts/install_and_audit.sh:8- Finding
Unpinned Package Retrieval and Execution Through npx
- Content
View full analysis
" exit 1 fi mkdir -p "$QUARANTINE_DIR" mkdir -p "$AUDIT_REPORT_DIR" echo "Iniciando instalação da skill '$SKILL_NAME' em quarentena..." # Using --dir to specify the installation directory for the skill $CLAWHUB_BIN install "$SKILL_NAME" --dir "$QUARANTINE_DIR" --force ``` The associated documentation also recommends an unpinned installation command in `SKILL.md`, line 52: ```text * **`clawhub` CLI**: Pode ser instalado globalmente via `npm i -g clawhub`. ``` ### Technical Analysis The script invokes `npx clawhub` without specifying an exact package version or validating package integrity. If the package is not already available locally, `npx` may retrieve the current package from the configured npm registry and execute it. Consequently, the code executed during installation is not fully determined by the reviewed project. It can change after the audit due to a legitimate update, registry compromise, maintainer-account compromise, package takeover, or malicious registry configuration. The globally documented `npm i -g clawhub` command has the same version-pinning weakness. The CLI is executed before the downloaded skill is audited. Any malicious behavior in the CLI, its dependencies, or applicable lifecycle behavior therefore occurs before the project’s pattern-based security checks can provide a warning. ### Attack Path 1. An attacker compromises the `clawhub` package, one of its dependencies, its maintainer account, or the package distribution path. 2. The attacker publishes a malicious version under the expected package name. 3. A user runs `scripts/install_and_audit.sh`. 4. `npx clawhub` resolves and downloads the unpinned package version. 5. The packa ...[truncated 917 chars]- Remediation
View remediation