Pine Pitch Glue Making Basics

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 4:30 AM UTC
• Version: 1.0.0

Overview

This skill is a coherent guide for making pine-pitch glue, with disclosed local logging and safety guidance, though users should be careful with its unpinned npx install command.

Before installing, verify that the clawhub installer comes from a trusted source or use a pinned version if available. If you use the skill, expect it to handle local photos/GPS-derived location context and write batch logs or templates to the filesystem. Follow the physical safety notes closely because hot pitch, fumes, fire, and tree-tapping rules create real-world risk.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:15

Finding

Unpinned Package Execution Through npx

Content

View full analysis

Vulnerability Details

File Location: SKILL.md, lines 15–22
Vulnerability Type: Unpinned third-party package execution
Risk Level: Medium

Vulnerable Code

yaml

openclaw:
  requires:
    tools: [filesystem]
  install: "npx clawhub install pine-pitch-glue-making-basics"
---
# Pine Pitch Glue Making Basics

`npx clawhub install pine-pitch-glue-making-basics`

Technical Analysis

The documented installation procedure executes clawhub through npx without specifying an audited package version, lockfile, package integrity hash, or trusted registry. If the package is not already available locally, npx can retrieve and execute the version currently resolved by the configured npm registry.

Consequently, the executable used at installation time may differ from the version that was originally reviewed. This creates a supply-chain trust boundary in which compromise of the package, its publishing account, the configured registry, or a future package release could result in attacker-controlled code being executed.

The same unpinned command appears both in the installation metadata and in the user-facing instructions, making it the expected installation path rather than an incidental example.

Attack Path

1. An attacker compromises the clawhub package, its publisher account, its dependency chain, or the registry through which it is resolved.
2. The attacker publishes a malicious version that still provides the expected CLI command.
3. A user follows the documented npx clawhub install pine-pitch-glue-making-basics instruction.
4. npx resolves and downloads the attacker-controlled or otherwise unreviewed package version.
5. The malicious package executes with the privileges and environment of the user running the installation command.
6. The payload may access files available to that user, alter installed skill content, read exposed environment variables, or execute additional comma ...[truncated 761 chars]

Remediation

View remediation

Remediation Suggestions

1. Pin the installer to a specific, reviewed version, for example:

   sh

   npx --yes clawhub@<audited-version> install pine-pitch-glue-making-basics
   

2. Verify the package against an expected cryptographic integrity value or signed provenance before execution.
3. Use a lockfile and a controlled registry or internal package mirror to ensure deterministic resolution.
4. Review the pinned package and its transitive dependencies before approving installation.
5. Execute installation in a sandbox or least-privileged environment without unnecessary credentials, sensitive environment variables, or writable access to unrelated files.
6. Update both the metadata installation command and the user-facing command so they reference the same verified version.
7. Establish a controlled update process in which newer versions are reviewed and their pins and integrity metadata are updated explicitly rather than resolving the latest release automatically.

SkillSpector

Vulnerability Patterns

• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The description says to use the skill whenever commercial adhesives become unreliable, expensive, or unavailable and for a wide range of repair, sealing, and trade scenarios. This trigger scope is broad and lacks clear boundaries or negative examples, increasing the chance of unintended invocation outside a narrowly defined resin-glue context.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence

Finding

The skill instructs users to run npx clawhub install pine-pitch-glue-making-basics without pinning an exact package or tool version. Unpinned npx execution can fetch and run whatever code is current at install time, creating a supply-chain execution risk if the package, dependency tree, or publishing account is compromised.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence

Finding

This repeated npx clawhub install pine-pitch-glue-making-basics command again relies on an unpinned executable version, exposing users to arbitrary code execution from the latest published package state. Repetition increases the chance that a user copies and runs the unsafe command directly.

Content

No source excerpt is available for this finding.