T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:14
- Finding
- Unpinned Package Execution and Skill Installation## Vulnerability Details **File Location**: `SKILL.md`, lines 14–18 **Vulnerability Type**: Supply-chain exposure through mutable package resolution **Risk Level**: Medium **Vulnerable Code:** ```bash npx clawhub@latest install lobster ``` ### Technical Analysis The installation instructions invoke `clawhub` through `npx` using the mutable `latest` distribution tag. The command does not pin an audited package version or verify the downloaded artifact's integrity or signature. Because `npx` can download and execute the package selected by the registry at invocation time, the effective installer may change after this Skill has been reviewed. A compromised publisher account, package registry, release process, or newly published malicious version could therefore turn the documented installation command into an arbitrary-code execution vector. ### Attack Path 1. An attacker compromises the `clawhub` publishing account, registry entry, or release pipeline, or otherwise causes a malicious release to become the package's `latest` version. 2. The attacker publishes an altered package containing malicious installation or runtime behavior. 3. A user follows the documented command: ```bash npx clawhub@latest install lobster ``` 4. `npx` resolves the mutable `latest` tag and downloads the attacker-controlled release. 5. The downloaded package executes with the privileges and environment of the invoking user. ### Impact Assessment Successful exploitation could permit arbitrary code execution under the invoking user's account. Depending on that account's privileges and environment, the malicious package could access readable files and credentials, alter local files, install modified Skill content, execute network requests, or affect other resources available to the user. The reviewed file does not itself establish privilege escalation, persistence, or an active package compromise; the risk arises from executing a mutab ...[truncated 26 chars]
- Remediation
- ## Remediation Suggestions - Replace `@latest` with an exact, reviewed version, for example: ```bash npx clawhub@X.Y.Z install lobster ``` - Verify the selected release and publisher before documenting or executing it. - Where supported, enforce package integrity using a trusted lockfile, registry integrity hash, checksum, or cryptographic signature. - Use a trusted registry explicitly and protect against dependency confusion or registry substitution. - Review upgrades before changing the pinned version rather than automatically tracking `latest`. - Run the installer with the minimum necessary privileges and avoid executing it as an administrator or root user.