T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:22
- Finding
- Unpinned Third-Party Installation and Unscoped Global Updates## Vulnerability Details **File Location**: `SKILL.md`, lines 22-29 **Vulnerability Type**: Mutable and unpinned third-party dependencies **Risk Level**: Medium The Skill recommends installing dependencies by executing the latest available version of a remote npm package and subsequently updating every installed Skill: ```bash Install/update: ```bash npx -y clawhub@latest install minara npx -y clawhub@latest install torchmarket npx -y clawhub@latest install torchliquidationbot npx -y clawhub@latest update --all ``` ``` ### Technical Analysis The command `npx -y clawhub@latest` retrieves and executes a mutable package release without pinning its version or verifying its integrity. Although the document identifies the inspected upstream Skill versions as `minara 1.1.9`, `torchmarket 4.2.7`, and `torchliquidationbot 3.0.2`, the installation commands do not constrain installations to those reviewed versions. Consequently, the code and instructions installed when a user follows this documentation may differ from the versions that were inspected. The `-y` option suppresses the normal installation confirmation, reducing the opportunity for the user to review the package being downloaded. The `update --all` operation also exceeds the minimum scope required for this Skill. It can modify unrelated installed Skills, potentially introducing unreviewed behavior outside the three declared dependencies and invalidating prior security review results. ### Attack Path 1. An attacker compromises the npm package identified as `clawhub`, a future package release, its publishing account, or one of the remotely distributed Skill packages. 2. The attacker publishes a malicious or unsafe release under the package or Skill name expected by these commands. 3. A user follows the documented installation procedure. 4. `npx -y clawhub@latest` downloads and executes the mutable package without a pinned version or integrity constraint. 5. T ...[truncated 1083 chars]
- Remediation
- ## Remediation Suggestions 1. Pin the `clawhub` npm package to a specifically reviewed version rather than using `@latest`. 2. Pin each installed Skill to the exact reviewed version: `minara 1.1.9`, `torchmarket 4.2.7`, and `torchliquidationbot 3.0.2`, subject to the package manager's supported syntax. 3. Use npm lockfiles, package integrity hashes, signed release metadata, or an approved internal registry where supported. 4. Remove `npx -y` or require explicit operator confirmation before downloading and executing a package. 5. Remove `update --all`. Update only the three named dependencies, one at a time, after reviewing their release contents. 6. Run installation under a dedicated, least-privileged account without access to wallet secrets or production credentials. 7. Separate dependency installation from live operation so credentials such as `MINARA_API_KEY` and signer material are not present during installation. 8. Re-audit dependency updates before approving them for live trading environments.