T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:11
- Finding
- Unpinned Third-Party Package Execution via Mutable npm Tag## Vulnerability Details **File Location**: `SKILL.md`, lines 11–13 **Vulnerability Type**: Supply-chain risk from an unpinned executable dependency **Risk Level**: Medium **Complete Code Snippet**: ```bash npx clawhub@latest install telegram-discord-bot-dev ``` ### Technical Analysis The documented installation command invokes `npx` with the mutable `@latest` tag. Depending on the local npm environment, `npx` can download and execute package-controlled code, including command-line entry points and lifecycle scripts. Because `@latest` does not identify an immutable, previously reviewed release, the code executed by users can change after this Skill has been audited. This creates a supply-chain trust boundary: compromise of the `clawhub` package, its publisher account, its transitive dependencies, or the package registry could cause the installation command to execute behavior that was not present during review. The project contains no version pin, lockfile, checksum, signature requirement, or other integrity control that constrains the downloaded package. ### Attack Path 1. An attacker compromises the package publisher, dependency chain, or registry distribution path, or otherwise causes a malicious release to become the version selected by the `latest` tag. 2. A user follows the installation command in `SKILL.md`. 3. `npx` resolves and downloads the attacker-controlled release. 4. Package-controlled command-line or lifecycle code executes with the privileges of the user running `npx`. 5. The malicious release can access resources available to that user, subject to operating-system and environment restrictions. ### Impact Assessment Successful exploitation could permit arbitrary code execution under the installing user's account. Potential scope includes reading or modifying user-accessible files, accessing environment variables and locally available credentials, making network requests, and altering project files. If the ...[truncated 338 chars]
- Remediation
- ## Remediation Suggestions - Replace `@latest` with an exact, reviewed package version rather than a mutable distribution tag. - Verify the package publisher, registry source, release provenance, and dependency tree before recommending execution. - Use lockfiles and registry integrity hashes where applicable so dependency resolution is reproducible. - Prefer signed releases or provenance attestations and verify them in the installation workflow. - Review package lifecycle scripts and avoid or disable them when they are not required. - Run installation in a least-privileged, isolated environment without production credentials or sensitive host mounts. - Establish a controlled update process in which each new package version is reviewed and tested before the documented pin is changed.