T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:37
- Finding
- Unpinned Remote Package Execution in Installation Instructions<![CDATA[ ## Vulnerability Details **File Location**: `SKILL.md:37-41` and `README.md:32-36` **Vulnerability Type**: Supply-chain exposure through mutable package execution **Risk Level**: Medium ### Vulnerable Code ```markdown ## Install ``` ```text npx clawhub@latest install model-alias-append ``` ### Technical Analysis The documented installation procedure instructs users to retrieve and execute the mutable `latest` release of the `clawhub` npm package. Neither a fixed package version nor an integrity hash is specified. Because `npx` can download and execute package code, the effective installer is not fully represented by the audited project. Its behavior can change after this audit whenever the package publisher updates the `latest` tag. A compromise of the publisher account, npm package, registry resolution path, or a future malicious release could therefore introduce arbitrary executable behavior. This finding concerns the documented external installation command. No malicious dependency or remote payload was found inside the reviewed project itself. ### Attack Path 1. An attacker compromises the `clawhub` package publication channel or otherwise causes a malicious release to become the package's `latest` version. 2. A user follows the installation instructions and runs: ```shell npx clawhub@latest install model-alias-append ``` 3. `npx` downloads the attacker-controlled package version. 4. Package entry points or lifecycle behavior execute with the permissions of the user running the command. 5. The malicious package can access or modify files and resources available to that user. ### Impact Assessment Successful exploitation could provide arbitrary code execution under the installing user's account. The accessible scope would depend on that user's privileges and could include project files, OpenClaw configuration, user-level credentials available to the process, and other files writable by the account. The reviewed command does not ...[truncated 202 chars]
- Remediation
- <![CDATA[ ## Remediation Suggestions 1. Replace `@latest` with a specifically reviewed version, for example: ```shell npx clawhub@<reviewed-version> install model-alias-append ``` 2. Publish and verify an integrity hash or signed release artifact where the package ecosystem supports it. 3. Document the expected registry and trusted package publisher. 4. Review the selected installer version, including its lifecycle scripts and transitive dependencies. 5. Update both `SKILL.md` and `README.md` so users are not directed to execute a mutable package release. ]]>