T08 · Insecure Dependencies
- Location
README.md:14- Finding
Unpinned npx Installation Executes a Mutable Supply-Chain Dependency
- Content
View full analysis
Vulnerability Details
File Location:
README.md:14-18and duplicated inREADME_CN.md:14-18
Vulnerability Type: Unpinned package retrieval and execution
Risk Level: MediumVulnerable code snippet:
markdown ## Install ```bash npx clawhub install maxhub-instagramtext ### Technical Analysis The documented installation command invokes `clawhub` through `npx` without specifying an exact package version or integrity hash. If the package is not already available locally, `npx` can retrieve and execute the currently resolved registry version. Consequently, the code executed during installation may differ from the version reviewed when this Skill was audited. The command also installs the Skill by an unversioned slug, `maxhub-instagram`, so users are not explicitly guaranteed to receive the audited Skill version `3.6.1`. This creates a mutable dependency chain involving both the installer and the installed artifact. Exploitation requires compromise of the relevant package publication channel, malicious transfer of package ownership, dependency confusion, registry compromise, or publication of a malicious future release. There is no evidence in the audited files that the current `clawhub` package or Skill release is malicious; the finding concerns the unsafe, unpinned installation mechanism. The separately identified transmission of `MAXHUB_API_KEY` to `https://www.aconfig.cn` is not classified as a vulnerability. The destination is declared in `SKILL.md`, HTTPS is used, the key is marked sensitive, and bearer authentication is necessary for the Skill's stated API-query functionality. ### Attack Path 1. An attacker gains the ability to publish or redirect a future `clawhub` package release, or compromises a dependency resolved by that package. 2. Alternatively, an attacker compromises or replaces a future release associated with the unversioned `maxhub-instagram` slug. 3. A user follows the docume ...[truncated 1161 chars]- Remediation
View remediation
Remediation Suggestions
-
Pin the installer to a reviewed version:
bash npx --yes clawhub@<reviewed-version> install maxhub-instagram@3.6.1Use the actual supported version syntax of the registry and installer.
-
Publish and document cryptographic integrity information, such as a package-manager lockfile, registry integrity digest, signed release, or SHA-256 checksum.
-
Ensure the installer verifies the downloaded Skill's signature or digest before installation.
-
Avoid automatic fallback to mutable tags such as
latest. Fail closed if the requested version or expected digest cannot be verified. -
Recommend installation from a trusted registry explicitly configured by the user, and document the expected package publisher and repository.
-
Run installation in a restricted environment without unnecessary credentials present. Do not expose
MAXHUB_API_KEYor other secrets to the installer process. -
Update both
README.mdandREADME_CN.mdso their installation commands remain identical and version-pinned.
-