T03 · Remote Payload Retrieval and Execution
Error
- Location
SKILL.md:286- Finding
Remote Verification Flow Executes Server-Provided Bash Code
- Content
View full analysis
get token -> GET /verify/ -> run bash script -> POST result ``` ### Technical Analysis The Skill instructs the Agent to retrieve a verification payload from a remote service and execute it as a Bash script. The effective code therefore is not contained in the reviewed package and can change at any time after publication or audit. No signature verification, expected checksum, command allowlist, execution sandbox, privilege reduction, or explicit user confirmation is specified. The instruction that verification happens “automatically” further reduces the opportunity for the user to inspect or reject the downloaded code. Executing remotely controlled shell code is not necessary for the Skill's declared public quest-browsing functionality and materially exceeds least privilege. The subsequent unspecified result submission also creates a potential channel through which data accessed by the script could be returned to the service. ### Attack Path 1. An attacker controls or compromises the ClawQuest verification service, its hosting infrastructure, or a verification response. 2. The Agent requests a challenge token through `POST /challenges`. 3. The Agent retrieves verification content from `GET /verify/`. 4. The malicious response provides or directs the Agent to a hostile Bash script. 5. Following the Skill instructions, the Agent executes the script without integrity validation or sandboxing. 6. The script runs with the operating-system privileges of th ...[truncated 960 chars]- Remediation
View remediation