T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:17
- Finding
- Unpinned Installation of a Privileged Third-Party Plugin<![CDATA[ ## Vulnerability Details **File Location**: `SKILL.md:17` **Vulnerability Type**: Unpinned third-party dependency installation **Risk Level**: Medium ### Vulnerable Code Snippet ```bash openclaw plugins install openclaw-morphixai ``` ### Technical Analysis The skill instructs users to install `openclaw-morphixai` without specifying a reviewed version, cryptographic digest, or other integrity constraint. Consequently, the package resolved at installation time can differ from the version originally reviewed. This dependency is security-sensitive because the skill requires `MORPHIXAI_API_KEY`, links a GitLab account through MorphixAI, and uses the installed integration to perform GitLab operations. A malicious or compromised future package release could therefore execute with access to the credentials and GitLab permissions available to the integration. The issue is a supply-chain risk rather than evidence that the current plugin is malicious. Exploitation depends on compromise or unauthorized replacement of the package, publisher account, registry entry, or distribution channel. ### Attack Path 1. An attacker compromises the plugin publisher, package registry, release process, or another component of the distribution chain. 2. The attacker publishes a modified release under the expected `openclaw-morphixai` package name. 3. A user follows the skill instructions and runs the unversioned installation command. 4. The package manager resolves and installs the attacker-controlled release. 5. When the plugin is loaded or invoked, it operates in a context where `MORPHIXAI_API_KEY` is required and a GitLab account may be linked. 6. The malicious plugin can attempt to capture accessible credentials, inspect GitLab data, or invoke operations permitted by the linked account. ### Impact Assessment Successful exploitation could expose the MorphixAI API key and GitLab information accessible through the linked account, including project metadata, source-cod ...[truncated 434 chars]
- Remediation
- <![CDATA[ ## Remediation Suggestions 1. Pin the plugin to an explicitly reviewed version rather than installing the latest available release: ```bash openclaw plugins install openclaw-morphixai@<reviewed-version> ``` 2. If supported by the package manager, pin and verify a cryptographic digest or lockfile entry so the installed artifact is immutable. 3. Document the expected registry, publisher identity, package signature, and artifact checksum. 4. Review new plugin releases before updating the pinned version. 5. Grant the linked GitLab account only the minimum scopes and project permissions required for the requested workflow. 6. Separate read-only review access from approval, pipeline retry, and merge permissions where possible. 7. Require explicit user confirmation immediately before privileged operations such as approving or merging a merge request. 8. Rotate `MORPHIXAI_API_KEY` and revoke linked-account authorization if dependency compromise is suspected. 9. Avoid exposing unrelated environment variables, credentials, or filesystem locations to the plugin runtime. ]]>