T08 · Insecure Dependencies
Warning
- Location
references/find-skills/SKILL.md:57- Finding
Unpinned and Unattended Installation of Third-Party Skills
- Content
View full analysis
npx skills check npx skills update ``` ```bash npx skills add -g -y ``` ```bash clawhub install browser-use --yes ``` ### Technical Analysis The Skill instructs the agent to discover and install packages from GitHub or other external sources without requiring an approved-source policy, integrity verification, immutable version or commit pinning, or a security review of the retrieved package. The `-g` option expands the installation scope to the user-level global environment, while `-y` and `--yes` suppress confirmation. Consequently, a search result can transition directly into an unattended installation. Package names such as `browser-use` are mutable identifiers rather than cryptographically verified artifacts. This creates a dependency supply-chain risk. A malicious publisher, compromised repository, dependency-confusion package, typosquatted package, or compromised upstream release could supply instructions or executable components that were not present during this audit. ### Attack Path 1. An attacker publishes a malicious Skill matching a likely search query, compromises an existing Skill repository, or gains control of a mutable upstream release. 2. A user asks the agent to locate a Skill for a particular capability. 3. The agent runs the documented search workflow and presents the attacker-controlled package as a candidate. 4. The user accepts the recommendation, or the workflow proceeds using the documented unattended installation flags. 5. The agent runs `npx skills add -g -y` or `clawhub install browser-use --yes`. 6. The unreviewed package is installed into the agent environment and ca ...[truncated 795 chars]- Remediation
View remediation