T08 · Insecure Dependencies
Warning
- Location
- README.md:36
- Finding
- Unpinned Package Execution in Installation Instructions## Vulnerability Details **File Location**: `README.md`, line 36 **Vulnerability Type**: Unpinned third-party package execution **Risk Level**: Medium **Complete Code Snippet**: ```bash npx clawhub install tetsuakira-vk/deep-work-planner ``` ### Technical Analysis The documented installation command invokes `clawhub` through `npx` without specifying an exact package version or integrity value. If the package is not already installed locally, `npx` may resolve and execute a mutable version from the configured npm registry. Consequently, the code executed during installation is not fully represented by or auditable from this repository. This creates a supply-chain trust boundary: compromise of the package, its dependencies, its registry account, or the registry resolution process could cause users following the documentation to execute altered code. The mutable skill identifier passed to the installer may introduce an additional unpinned retrieval step, depending on the behavior of the external `clawhub` tool. No evidence in the audited files demonstrates that the current `clawhub` package is malicious. The issue is the lack of version and integrity controls around executable third-party content. ### Attack Path 1. An attacker compromises the publisher account, package, dependency chain, or registry source used to resolve `clawhub`. 2. The attacker publishes or causes resolution of a modified package version containing malicious CLI or lifecycle behavior. 3. A user copies the installation command from `README.md`. 4. `npx` downloads and executes the mutable package version. 5. The malicious code runs with the permissions and environmental access of the invoking user. ### Impact Assessment Successful exploitation could provide access equivalent to the user running the installation command. Depending on that user's permissions and environment, malicious package code could read or modify accessible files, inspect enviro ...[truncated 421 chars]
- Remediation
- ## Remediation Suggestions 1. Pin `clawhub` to a reviewed exact version rather than allowing `npx` to resolve a mutable release: ```bash npx --yes clawhub@<verified-exact-version> install tetsuakira-vk/deep-work-planner ``` 2. Pin the installed skill to an immutable version, commit, or content digest if the installer supports this capability. 3. Document the expected registry and official package provenance so users can verify that the package has not been obtained from an unexpected source. 4. Publish and verify integrity hashes or signed release artifacts for both the installer and skill package. 5. Recommend installation under a non-privileged account and explicitly warn users not to run the command with `sudo` or administrative privileges. 6. Where practical, provide a non-executing download and verification workflow so users can inspect the resolved package before running it.