T08 · Insecure Dependencies
Warning
- Location
scripts/explore.sh:40- Finding
Untrusted Skills Are Force-Installed Before Security Review
- Content
View full analysis
&1 || { echo "⚠️ May need --force for suspicious skills" ``` The same unsafe workflow is recommended in `SKILL.md:96-102`: ```bash # Install to temp directory for inspection cd /tmp && mkdir skill-check cd skill-check && clawhub install ``` ### Technical Analysis The Skill's purpose is to assess third-party Skills before recommending or approving their installation. However, the implementation invokes `clawhub install`—including the `--force` option—before conducting the static security analysis. Installation is a higher-privilege and higher-impact operation than downloading and unpacking an artifact for inspection. If the ClawHub installation process executes package hooks, interprets package-controlled installation instructions, resolves additional dependencies, or writes files outside the review directory, malicious behavior could occur before the analyzer examines the files. The `--force` option further weakens safety controls by potentially overriding warnings, conflicts, or protections. This behavior exceeds the minimum privileges needed for static review. No malicious dependency is embedded in this project, but the workflow creates a supply-chain exposure when it processes attacker-controlled Skills. ### Attack Path 1. An attacker publishes or compromises a Skill available through ClawHub. 2. The malicious Skill is made relevant to a search performed through this exploration workflow. 3. A user runs: ```bash ./explore.sh download ``` 4. The script invokes: ```bash clawhub install "" --force ``` 5. If ClawHub processes executable installation behavior, unsafe metadata, or dependency h ...[truncated 874 chars]- Remediation
View remediation