T08 · Insecure Dependencies
Error
- Location
- SKILL.md:10
- Finding
- Unpinned and Unverified External CLI Installation## Vulnerability Details **File Location**: `SKILL.md`, lines 10-20 **Vulnerability Type**: Unverified third-party executable dependency **Risk Level**: High ### Vulnerable Code Snippet ```markdown **OpenClaw CLI must be installed before using this skill.** Download and install (Windows, MacOS) from: https://openclawcli.vercel.app/ Verify installation: ```bash openclawcli --version ``` ``` ### Technical Analysis The skill instructs users to download and install a required executable from a mutable Vercel-hosted website. It does not specify an exact package version, immutable artifact URL, cryptographic checksum, digital signature, trusted package registry, or source repository from which the executable can be independently verified. The package itself contains only documentation and metadata; it does not include the PhoenixShield or OpenClaw CLI implementation. Consequently, the behavior and provenance of the required executable cannot be audited from this project. Running `openclawcli --version` only confirms that an executable responds under that name and does not establish its authenticity or integrity. This is an insecure software supply-chain dependency. If the hosting account, domain, deployment pipeline, or distributed installer were compromised, the effective executable delivered to users could change after this skill was reviewed. ### Attack Path 1. An attacker compromises the referenced website, its hosting account, deployment pipeline, or downloadable installer. 2. The attacker replaces the legitimate installer or download target with a modified executable. 3. A user follows the prerequisite in `SKILL.md` and installs the unverified executable. 4. The attacker-controlled executable runs with the permissions of the installing user. 5. If the user grants administrative privileges—plausible for the documented system backup, package-update, and rollback operations—the executable may obtain system-wi ...[truncated 659 chars]
- Remediation
- ## Remediation Suggestions 1. Replace the mutable website-only installation instruction with an official, immutable release artifact URL. 2. Pin the dependency to an exact version rather than directing users to install an unspecified current release. 3. Publish SHA-256 or stronger cryptographic hashes for every supported platform and require users or installation logic to verify them before execution. 4. Digitally sign release artifacts and document signature verification using a stable, independently distributed public key. 5. Link to the authoritative source repository, release history, security policy, and reproducible build instructions. 6. Prefer a trusted package registry with publisher verification, provenance attestations, and lockfile or digest support. 7. Document the minimum permissions required for installation and runtime, and explicitly discourage administrative execution unless a specific operation requires it. 8. Explain that `openclawcli --version` is only a functional check and must not be treated as an integrity or authenticity check. 9. Include or reference an auditable implementation of the documented `phoenix-shield` commands so that backup encryption, credential handling, command execution, and rollback safety can be independently reviewed.