T08 · Insecure Dependencies
Warning
- Location
SKILL.md:22- Finding
Unpinned Third-Party Installation and Unscoped Global Updates
- Content
View full analysis
Vulnerability Details
File Location:
SKILL.md, lines 22-29
Vulnerability Type: Mutable and unpinned third-party dependencies
Risk Level: MediumThe Skill recommends installing dependencies by executing the latest available version of a remote npm package and subsequently updating every installed Skill:
bash Install/update: ```bash npx -y clawhub@latest install minara npx -y clawhub@latest install torchmarket npx -y clawhub@latest install torchliquidationbot npx -y clawhub@latest update --alltext ### Technical Analysis The command `npx -y clawhub@latest` retrieves and executes a mutable package release without pinning its version or verifying its integrity. Although the document identifies the inspected upstream Skill versions as `minara 1.1.9`, `torchmarket 4.2.7`, and `torchliquidationbot 3.0.2`, the installation commands do not constrain installations to those reviewed versions. Consequently, the code and instructions installed when a user follows this documentation may differ from the versions that were inspected. The `-y` option suppresses the normal installation confirmation, reducing the opportunity for the user to review the package being downloaded. The `update --all` operation also exceeds the minimum scope required for this Skill. It can modify unrelated installed Skills, potentially introducing unreviewed behavior outside the three declared dependencies and invalidating prior security review results. ### Attack Path 1. An attacker compromises the npm package identified as `clawhub`, a future package release, its publishing account, or one of the remotely distributed Skill packages. 2. The attacker publishes a malicious or unsafe release under the package or Skill name expected by these commands. 3. A user follows the documented installation procedure. 4. `npx -y clawhub@latest` downloads and executes the mutable package without a pinned version or integrity constraint. 5. T ...[truncated 1083 chars]- Remediation
View remediation
Remediation Suggestions
- Pin the
clawhubnpm package to a specifically reviewed version rather than using@latest. - Pin each installed Skill to the exact reviewed version:
minara 1.1.9,torchmarket 4.2.7, andtorchliquidationbot 3.0.2, subject to the package manager's supported syntax. - Use npm lockfiles, package integrity hashes, signed release metadata, or an approved internal registry where supported.
- Remove
npx -yor require explicit operator confirmation before downloading and executing a package. - Remove
update --all. Update only the three named dependencies, one at a time, after reviewing their release contents. - Run installation under a dedicated, least-privileged account without access to wallet secrets or production credentials.
- Separate dependency installation from live operation so credentials such as
MINARA_API_KEYand signer material are not present during installation. - Re-audit dependency updates before approving them for live trading environments.
- Pin the