T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:4
- Finding
- Execution of an External npm Package Without Artifact Integrity Verification<![CDATA[ ## Vulnerability Details **File Location**: `SKILL.md:4,49-55`; `SKILL-cn.md:4,49-55` **Vulnerability Type**: Third-party supply-chain exposure **Risk Level**: Medium ### Vulnerable Code `SKILL.md`: ```yaml metadata: {"clawdbot":{"emoji":"🤖","requires":{"bins":["npm","npx"]},"install":"npm install -g @dlazy/cli@1.2.3","installAlternative":"npx @dlazy/cli@1.2.3","homepage":"https://github.com/dlazy-ai/cli","source":"https://github.com/dlazy-ai/cli","author":"dlazyai","license":"see-repo","npm":"https://www.npmjs.com/package/@dlazy/cli","configLocation":"~/.dlazy/config.json","apiEndpoints":["api.dlazy.com","files.dlazy.com"]},"openclaw":{"systemPrompt":"When invoking this skill, use dlazy jimeng-dream-actor -h for help."}} ``` ```bash npx @dlazy/cli@1.2.3 <command> ``` ```bash npm install -g @dlazy/cli@1.2.3 ``` `SKILL-cn.md`: ```yaml metadata: {"clawdbot":{"emoji":"🤖","requires":{"bins":["npm","npx"]},"install":"npm install -g @dlazy/cli@1.2.3","installAlternative":"npx @dlazy/cli@1.2.3","homepage":"https://github.com/dlazy-ai/cli","source":"https://github.com/dlazy-ai/cli","author":"dlazyai","license":"see-repo","npm":"https://www.npmjs.com/package/@dlazy/cli","configLocation":"~/.dlazy/config.json","apiEndpoints":["api.dlazy.com","files.dlazy.com"]},"openclaw":{"systemPrompt":"当调用此技能时，可以使用 dlazy jimeng-dream-actor -h 查看帮助信息。"}} ``` ```bash npx @dlazy/cli@1.2.3 <command> ``` ```bash npm install -g @dlazy/cli@1.2.3 ``` ### Technical Analysis The Skill delegates its core behavior to the external npm package `@dlazy/cli@1.2.3`. Pinning the package version limits unintended version drift, but the project does not vendor the executable implementation or provide a cryptographic checksum, signature, lockfile, or other mechanism for independently verifying the retrieved package artifact. Consequently, the supplied project cannot establish that the code executed during installation and invocation is identical to code previously reviewed. npm ins ...[truncated 2168 chars]
- Remediation
- <![CDATA[ ## Remediation Suggestions 1. Vendor and review the exact CLI implementation and its required dependencies as part of the audited Skill artifact where licensing and maintenance constraints permit. 2. Publish cryptographic checksums or signed provenance for approved package artifacts and verify them before execution. 3. Use an npm lockfile with integrity fields for a controlled installation workflow, including pinned transitive dependencies. 4. Prefer a project-local, isolated installation over `npm install -g` so the binary does not persist globally or affect unrelated workflows. 5. Execute the CLI in a sandbox or container with access limited to: - The specific input media selected by the user. - A dedicated output directory. - The minimum required configuration file. - Only the documented dLazy network endpoints. 6. Avoid running npm or the CLI with administrator or root privileges. 7. Disable npm lifecycle scripts where compatible with the verified package behavior, or separately audit every required lifecycle script before allowing execution. 8. Protect API credentials using a platform credential store where possible, and provide narrowly scoped, revocable keys. 9. Establish dependency monitoring and a documented process for reviewing package ownership changes, newly disclosed vulnerabilities, and transitive dependency updates. 10. Apply equivalent changes to both `SKILL.md` and `SKILL-cn.md` so their installation guidance remains consistent. ]]>