T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:13
- Finding
- Unpinned Package Execution in Installation Instructions## Vulnerability Details **File Location**: `SKILL.md:13-17` and `README.md:17-21` **Vulnerability Type**: Unpinned third-party package execution **Risk Level**: Medium **Vulnerable code in `SKILL.md`:** ```bash Install from ClawHub: ```bash npx clawhub install system-info-skill ``` ``` **Vulnerable code in `README.md`:** ```bash ## Installation ```bash npx clawhub install system-info ``` ``` ### Technical Analysis The documented installation process invokes `clawhub` through `npx` without specifying an exact package version or an integrity constraint. If the package is not already available locally, `npx` can retrieve and execute a package from the configured npm registry. Consequently, the code executed during installation may differ from the code that was reviewed. This creates a supply-chain exposure: compromise of the upstream package, registry account, package namespace, or a subsequently published version could cause users following the documentation to execute attacker-controlled package lifecycle scripts or command-line code. The documentation also uses inconsistent skill identifiers: `system-info-skill` in `SKILL.md` and `system-info` in `README.md`. Although this inconsistency does not itself prove malicious behavior, it makes package provenance harder to verify and may cause users to install an unintended artifact. ### Attack Path 1. An attacker compromises the upstream `clawhub` package or its publisher account, or gains control over the package name resolved by the user's registry. 2. The attacker publishes a malicious package version containing hostile lifecycle scripts or CLI behavior. 3. A user follows the documented `npx clawhub install ...` command. 4. `npx` resolves and downloads the unpinned package version from the configured registry. 5. The downloaded package executes with the privileges of the user running the installation command. 6. The malicious package can access files ...[truncated 854 chars]
- Remediation
- ## Remediation Suggestions 1. Pin the installer to an explicitly reviewed version, for example: ```bash npx clawhub@<reviewed-version> install system-info-skill ``` 2. Prefer an installation process that verifies a cryptographic signature or published checksum before executing downloaded content. 3. Use a trusted, explicitly configured registry and document the expected package publisher and provenance. 4. Consider installing the reviewed CLI version separately with lifecycle scripts disabled where compatible, then invoking the locally verified executable. 5. Make the skill identifier consistent across `SKILL.md` and `README.md`. 6. Add release documentation identifying the exact installer version, skill version, package digest, and verification procedure. 7. Advise users not to run the installation command with administrative privileges unless strictly required.