T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:18
- Finding
- Unpinned Third-Party Plugin Installation<![CDATA[ ## Vulnerability Details **File Location**: `SKILL.md`, lines 18-22 **Vulnerability Type**: Unpinned third-party dependency **Risk Level**: Medium ### Vulnerable Code ```markdown ### Step 2: Install the plugin Run this in your terminal: \`\`\` openclaw plugins install @emotion-machine/claw-messenger \`\`\` ``` ### Technical Analysis The installation command references `@emotion-machine/claw-messenger` without specifying an immutable version or integrity hash. Consequently, the package resolved at installation time may differ from the package that was originally reviewed or intended by the Skill author. The plugin implementation is not included in this project, so its behavior, requested permissions, handling of credentials, and message-processing logic cannot be verified by this audit. Although no evidence establishes that the current package is malicious, this mutable dependency creates a supply-chain trust boundary that is not controlled by the reviewed repository. ### Attack Path 1. An attacker compromises the package publisher account, registry release process, or another relevant supply-chain component. 2. The attacker publishes a malicious release under the same package name or modifies the package resolved by the unpinned command. 3. A user follows the Skill instructions and installs the package without verifying a version or integrity digest. 4. The malicious plugin executes within the OpenClaw environment. 5. Subject to the plugin runtime's actual permissions, it could access configuration data, intercept messaging content, misuse API credentials, or perform other actions available to the plugin process. ### Impact Assessment Successful exploitation could provide the malicious dependency with the privileges granted to an OpenClaw plugin. The precise privilege scope cannot be determined from `SKILL.md` alone because the plugin source and runtime permission model were not provided. Potentially exposed assets include the Claw Messen ...[truncated 277 chars]
- Remediation
- <![CDATA[ ## Remediation Suggestions 1. Pin the plugin to a specific, reviewed version rather than installing the latest mutable release: ```text openclaw plugins install @emotion-machine/claw-messenger@<reviewed-version> ``` 2. Verify the package using a cryptographic integrity digest or signed provenance before installation. 3. Publish or vendor the corresponding plugin source so its behavior can be audited together with the Skill. 4. Use a trusted lockfile and a registry configuration that prevents dependency substitution. 5. Review package ownership, release history, lifecycle scripts, transitive dependencies, and requested runtime permissions. 6. Run the plugin with least privilege, restricting filesystem access, environment variables, network destinations, and access to unrelated OpenClaw secrets. 7. Establish an explicit update process in which new versions are reviewed before changing the pinned dependency. ]]>