T08 · Insecure Dependencies
Warning
- Location
SKILL.md:19- Finding
Unpinned Third-Party Plugin Installation
- Content
View full analysis
/dev/null && echo "INSTALLED" || echo "NOT_INSTALLED" ``` If NOT_INSTALLED, install it: ```bash openclaw plugins install openclaw-edith-glasses ``` ### Technical Analysis The Skill instructs the agent to install `openclaw-edith-glasses` by package name without specifying an audited version, integrity digest, trusted registry, or verified publisher identity. Consequently, the code installed at execution time can differ from the package that existed when the Skill was reviewed. An OpenClaw plugin may execute code in the context of the OpenClaw process and interact with agent data, configuration, channels, and other resources available to that process. Installing a mutable third-party dependency without integrity controls creates a supply-chain risk. ### Attack Path 1. An attacker compromises the package publisher, package registry, or distribution account, or publishes a conflicting package through an unsafe package source. 2. The attacker distributes a malicious version under the expected `openclaw-edith-glasses` package name. 3. A user invokes the Skill on a system where the plugin is not installed. 4. The Skill runs `openclaw plugins install openclaw-edith-glasses`. 5. The package manager resolves and installs the attacker-controlled version. 6. The malicious plugin executes with the permissions and data access available to the OpenClaw plugin process. ### Impact Assessment Successful exploitation could allow execution of malicious plugin code under the account running OpenClaw. The reachable scope may include OpenClaw configuration, channel credentials, conversation or agent data accessible to plugins, and local files available to that operating-system account. The instruction does not ...[truncated 130 chars]- Remediation
View remediation