T08 · Insecure Dependencies
Error
- Location
SKILL.md:8- Finding
Unpinned Remote Package Execution Through Mutable Latest Release
- Content
View full analysis
**Consolidated (Δ9 v2):** New installs → `lygo-champion-council`. This slug is legacy retention only. > `npx clawhub@latest install deepseekoracle/lygo-champion-council` ``` ### Technical Analysis The documented installation command uses `npx` to download and execute the mutable `latest` release of the `clawhub` package. Neither the executable package nor the successor Skill is pinned to a reviewed immutable version or cryptographic digest. Because the `latest` tag can be reassigned after this project has been audited, the code executed by users may differ from the code that was originally reviewed. Compromise of the package registry, publisher account, package maintainership, or successor Skill could turn the installation instruction into a supply-chain execution path. The command is presented as a manual installation instruction rather than being automatically invoked by the bundled Python scripts. Exploitation therefore requires a user or agent to follow the documented command. ### Attack Path 1. An attacker compromises the `clawhub` package, its publisher account, its dependency chain, or the referenced successor Skill. 2. The attacker publishes a malicious release and assigns it to the mutable `latest` tag, or changes the content subsequently retrieved by the installer. 3. A user follows the installation command in `SKILL.md`. 4. `npx` retrieves and executes the attacker-controlled package. 5. The malicious package runs with the operating-system privileges and environment access of the invoking user. 6. Depending on those privileges, it could access project files, environment variables, user-readable credentials, or install additional malicious content. ### Impact Assessment Successful exploitation could result in arbitrary code execution with the priv ...[truncated 444 chars]- Remediation
View remediation