Braided Rag Rug Making Basics

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 4:39 AM UTC
• Version: 1.0.0

Overview

This is a coherent craft-planning skill for braided rag rugs, with a supply-chain caution around its unpinned install command.

Before installing, prefer a reviewed or version-pinned ClawHub CLI invocation and run installation from a low-privilege environment. Expect the skill to store rug photos, inventory details, progress logs, templates, and reminders in local files you choose.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:17

Finding

Unpinned Package Execution Through npx

Content

View full analysis

Vulnerability Details

File Location: SKILL.md, lines 17 and 24
Vulnerability Type: Unpinned third-party package execution
Risk Level: Medium

Vulnerable Code

yaml

openclaw:
  requires:
    tools: [filesystem]
  install: "npx clawhub install braided-rag-rug-making-basics"

shell

npx clawhub install braided-rag-rug-making-basics

Technical Analysis

The documented installation command invokes clawhub through npx without specifying a reviewed version, integrity hash, lockfile, or trusted package provenance. If the package is absent locally, npx can retrieve it from the configured package registry and execute its package entry point.

Consequently, the code executed during installation can differ from the code that existed when this skill was reviewed. The audited project contains only SKILL.md; it does not include the implementation of the externally retrieved clawhub package, so that implementation and its transitive dependencies cannot be verified from the project contents.

This creates a software supply-chain exposure. Exploitation would require compromise or malicious replacement of the package, its maintainer account, the configured registry, or a relevant dependency.

Attack Path

1. An attacker compromises the clawhub package, a maintainer account, the package registry, or a dependency resolved by the package.
2. The attacker publishes a malicious version that remains compatible with the unversioned package name.
3. A user follows the documented command:

   shell

   npx clawhub install braided-rag-rug-making-basics
   

4. npx resolves and downloads the attacker-controlled package version.
5. The malicious package code executes with the permissions and environment available to the invoking user.
6. The payload may access or alter files and processes permitted to that user, including project data and credentials exposed through the execution environment.

Impact Assessment

Successful exploi ...[truncated 626 chars]

Remediation

View remediation

Remediation Suggestions

1. Pin clawhub to a specific, reviewed version, for example:

   shell

   npx --yes clawhub@<reviewed-version> install braided-rag-rug-making-basics
   

2. Record and verify package integrity using a lockfile and registry-provided integrity hashes.
3. Configure and document the expected trusted registry rather than relying on ambient npm configuration.
4. Review the pinned package and relevant transitive dependencies before recommending execution.
5. Run installation with a nonprivileged account and a minimal environment that does not expose unrelated credentials.
6. Prefer a preinstalled, independently verified CLI over downloading and executing package code at invocation time.
7. Establish a controlled update process in which version changes are explicitly reviewed and tested before the documented command is updated.

SkillSpector

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 96% confidence

Finding

The skill includes an npx clawhub install braided-rag-rug-making-basics command without pinning the package or tool to a specific version. Running unpinned npx content can fetch and execute whatever version is current at execution time, creating supply-chain risk if the upstream package changes, is compromised, or is replaced with a malicious release.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 96% confidence

Finding

This second occurrence repeats the same unpinned npx clawhub invocation in the body of the skill, again encouraging execution of mutable remote code. Because npx resolves packages at runtime, any compromise or unexpected update in the dependency chain could result in arbitrary code execution on the user's system.

Content

No source excerpt is available for this finding.