T08 · Insecure Dependencies
- Location
SKILL.md:40- Finding
Unpinned Third-Party Installation from Mutable Sources
- Content
View full analysis
Vulnerability Details
File Locations:
SKILL.md:40-43README.md:52-54README.zh-CN.md:52-54clawhub-copy.md:11-15
Vulnerability Type: Unpinned npm CLI dependency and mutable GitHub installation source
Risk Level: MediumVulnerable Code
The affected documentation instructs users to execute the following installation command:
bash npx skills add https://github.com/sirsws/akm --skill akm-fashion-strategist --full-depthTechnical Analysis
The installation command uses
npx skillswithout specifying an exact package version. Consequently,npxcan resolve and execute the version of theskillspackage available at installation time rather than a version reviewed alongside this project.The GitHub source is also specified only as a repository URL:
text https://github.com/sirsws/akmIt is not pinned to an immutable commit hash or verified release artifact. The effective content installed by
--full-depthcan therefore change after this audit without any modification to the audited files.No malicious package, payload, or compromised upstream component was identified in the audited artifact. The vulnerability is the absence of dependency pinning and integrity controls, which creates a supply-chain trust boundary outside the reviewed project.
Attack Path
- An attacker compromises the npm package resolved by
npx skills, the associated package publishing account, or the referenced GitHub repository. - The attacker publishes a modified CLI version or changes content reachable through the repository's mutable default branch.
- A user follows the documented installation instructions.
npxresolves and runs the unpinned third-party CLI, and the installer retrieves content from the mutable repository source.- The altered installer or Skill content executes or is installed under the invoking user's account.
- The resulting behavior may differ f ...[truncated 929 chars]
- Remediation
View remediation
Remediation Suggestions
-
Pin the npm CLI to an exact reviewed version:
bash npx --yes skills@<exact-reviewed-version> add ... -
Pin the GitHub source to a full immutable commit hash, if supported by the installer:
bash npx --yes skills@<exact-reviewed-version> add https://github.com/sirsws/akm.git#<full-commit-hash> --skill akm-fashion-strategist --full-depth -
Prefer a signed, versioned release archive over a mutable branch or default repository reference.
-
Publish a SHA-256 checksum for the expected release artifact and require users or the installer to verify it before installation.
-
Use signed Git tags or provenance mechanisms such as Sigstore and verify the signature against a documented maintainer identity.
-
Commit a lock file or installation manifest recording the exact CLI version, repository commit, and expected integrity digest.
-
Update every duplicated installation command consistently in
SKILL.md, both README variants, and the ClawHub listing. -
Document the permissions and files used by the installer so users can review the expected installation effects before running it.
-