T08 · Insecure Dependencies
Error
- Location
SKILL.md:33- Finding
Unverified Global npm Package Installation
- Content
View full analysis
- Remediation
View remediation
Security audit
Business Agent Launchpad
Security checks for vulnerabilities and agentic risk
Overview
This skill has a coherent business-agent setup purpose, but it asks the agent to run an unverified global npm install from an unspecified local folder.
Review this skill before installing. Only use it when you explicitly want to initialize an OpenClaw or Hermes business-agent workspace, and do not allow it to run `npm install -g .` unless you have verified the exact project directory and trust its package scripts. Prefer a pinned, local, reviewed CLI install path.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (1)
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
The skill exposes a broad display/description and an explicit default prompt for generic business workflow initialization while also allowing implicit invocation. That combination can cause the platform to trigger this skill for vague office-work requests, leading to overbroad tool/workspace setup actions the user did not clearly request.
- Content