T08 · Insecure Dependencies
- Location
README.md:24- Finding
Unpinned Package and Repository Sources in Installation Instructions
- Content
View full analysis
Vulnerability Details
File Location:
README.md:24-39; mirrored inREADME.zh-CN.md:24-39
Vulnerability Type: Unpinned third-party dependencies and mutable installation sources
Risk Level: MediumVulnerable Code
The following installation instructions appear in both documentation files:
bash npx clawhub login npx clawhub install xhunt-hot-tweets openclaw skills info xhunt-hot-tweetsbash git clone https://github.com/DoTheWorkNow/xhunt-hot-tweets-skill.git mkdir -p ~/.openclaw/workspace/skills/xhunt-hot-tweets rsync -a --delete ./xhunt-hot-tweets-skill/ ~/.openclaw/workspace/skills/xhunt-hot-tweets/ openclaw skills info xhunt-hot-tweetsTechnical Analysis
The
npx clawhubcommands resolve and execute a registry-provided package without specifying an audited version or integrity digest. The code executed bynpxcan therefore differ from the version that existed when this project was reviewed.The GitHub installation path similarly clones the repository's mutable default branch. It does not check out a reviewed commit or signed release and performs no checksum or signature verification. The resulting files are then copied into the active OpenClaw skills directory using
rsync --delete.These installation paths create a supply-chain trust boundary in which compromise of the package registry account, package publisher, GitHub account, repository, or default branch could replace the reviewed content. The current repository snapshot contains no embedded executable scripts or malicious payloads; the risk arises from the installation process accepting future mutable content without verification.
Attack Path
- An attacker compromises the
clawhubregistry package, its publisher account, the GitHub repository, or an associated maintainer account. - The attacker publishes a modified package version or replaces content on the repository's default branch.
- A user foll ...[truncated 1144 chars]
- An attacker compromises the
- Remediation
View remediation
Remediation Suggestions
- Pin the ClawHub command-line package to a reviewed version rather than allowing
npxto resolve the latest release:bash npx clawhub@<reviewed-version> login npx clawhub@<reviewed-version> install xhunt-hot-tweets - Where supported, use a lockfile, package-manager integrity metadata, or an expected package digest to verify the downloaded package.
- Install from a signed release or check out an immutable, reviewed Git commit:
bash git clone https://github.com/DoTheWorkNow/xhunt-hot-tweets-skill.git cd xhunt-hot-tweets-skill git checkout --detach <reviewed-commit-sha> - Publish the expected commit SHA and SHA-256 digest through a separate trusted release channel.
- Verify release signatures, commit signatures, or checksums before copying files into the active skills directory.
- Review the downloaded file tree before running
rsync --delete, particularly if future releases add scripts, hooks, executables, or additional Agent instructions. - Apply the same hardened installation guidance consistently to both
README.mdandREADME.zh-CN.md.
- Pin the ClawHub command-line package to a reviewed version rather than allowing