T08 · Insecure Dependencies
Warning
- Location
- README.md:14
- Finding
- Unpinned Third-Party Skill Installation## Vulnerability Details **File Location**: `README.md:14` **Vulnerability Type**: Unverified and unpinned third-party dependency **Risk Level**: Medium **Complete Code Snippet**: ```bash # Install OpenClaw clawdhub install openclaw-multiagent ``` ### Technical Analysis The setup instructions install the third-party `openclaw-multiagent` Skill without specifying an immutable version, cryptographic digest, verified publisher, or trusted source. The dependency is not included in this project, so its implementation and effective behavior could not be reviewed during this audit. Because the installation resolves package content at installation time, a compromised registry account, malicious package update, dependency substitution, or registry compromise could cause users to install content different from what the project author originally intended. Any instructions or executable components supplied by that dependency may subsequently operate with the permissions granted to the Agent environment. ### Attack Path 1. An attacker compromises the dependency publisher, registry entry, or package distribution channel for `openclaw-multiagent`. 2. The attacker publishes a malicious release under the expected package name. 3. A user follows the README and executes the unpinned installation command. 4. The package manager resolves and installs the attacker-controlled release. 5. When the dependency is loaded or invoked, its malicious instructions or code execute with the permissions available to the Agent. 6. Depending on those permissions, the payload could read or modify workspace data, alter Agent behavior, invoke accessible tools, or perform unauthorized external actions. ### Impact Assessment The maximum impact depends on the permissions assigned to OpenClaw and the installed Skill. Potential exposure includes project and workspace files, Agent tool access, workflow integrity, and any credentials available to the Agent pro ...[truncated 189 chars]
- Remediation
- ## Remediation Suggestions 1. Pin `openclaw-multiagent` to a reviewed, immutable version or content digest rather than resolving the latest available release. 2. Document the expected registry, package publisher, and canonical package source to reduce dependency-confusion and typosquatting risks. 3. Verify package signatures or checksums before installation where supported. 4. Audit the dependency's Skill instructions, scripts, hooks, and transitive dependencies before recommending it. 5. Use a lockfile or equivalent integrity manifest if the package manager supports one. 6. Run the dependency with least privilege, restricting filesystem, credential, network, and tool access to what the content workflow requires. 7. Update the installation documentation to include the verified version and integrity-verification procedure.