T08 · Insecure Dependencies
Error
- Location
- SKILL.md:8
- Finding
- Unpinned Remote Package Execution Through Mutable Latest Release<![CDATA[ ## Vulnerability Details **File Location**: `SKILL.md:8` **Vulnerability Type**: Unpinned third-party executable dependency **Risk Level**: High ### Vulnerable Code Snippet ```markdown > **Consolidated (Δ9 v2):** New installs → `lygo-champion-council`. This slug is legacy retention only. > `npx clawhub@latest install deepseekoracle/lygo-champion-council` ``` ### Technical Analysis The documented installation command uses `npx` to download and execute the mutable `latest` release of the `clawhub` package. Neither the executable package nor the successor Skill is pinned to a reviewed immutable version or cryptographic digest. Because the `latest` tag can be reassigned after this project has been audited, the code executed by users may differ from the code that was originally reviewed. Compromise of the package registry, publisher account, package maintainership, or successor Skill could turn the installation instruction into a supply-chain execution path. The command is presented as a manual installation instruction rather than being automatically invoked by the bundled Python scripts. Exploitation therefore requires a user or agent to follow the documented command. ### Attack Path 1. An attacker compromises the `clawhub` package, its publisher account, its dependency chain, or the referenced successor Skill. 2. The attacker publishes a malicious release and assigns it to the mutable `latest` tag, or changes the content subsequently retrieved by the installer. 3. A user follows the installation command in `SKILL.md`. 4. `npx` retrieves and executes the attacker-controlled package. 5. The malicious package runs with the operating-system privileges and environment access of the invoking user. 6. Depending on those privileges, it could access project files, environment variables, user-readable credentials, or install additional malicious content. ### Impact Assessment Successful exploitation could result in arbitrary code execution with the priv ...[truncated 444 chars]
- Remediation
- <![CDATA[ ## Remediation Suggestions - Replace `clawhub@latest` with an explicitly reviewed version. - Pin the package using an immutable version and, where supported, verify its registry integrity digest. - Pin the successor Skill to a specific reviewed release or content hash. - Document the expected package digest and verify it before execution. - Avoid executing remote packages directly through `npx` in security-sensitive environments. - Prefer installing into an isolated environment, reviewing the resolved dependency tree, and then invoking the verified local executable. - Establish an upgrade process that requires explicit review before changing pinned versions or hashes. ]]>