T08 · Insecure Dependencies
Warning
- Location
- SKILL.md:45
- Finding
- Unpinned Package Execution in Installation Instructions## Vulnerability Details **File Location**: `SKILL.md:45` and `SKILL.md:72` **Vulnerability Type**: Unpinned third-party package execution **Risk Level**: Medium **Complete vulnerable code snippet:** ```bash npx clawhub install realmrouter-switch --force ``` The same command is documented for both macOS/Linux and Windows installations. ### Technical Analysis The installation instructions invoke `clawhub` through `npx` without specifying an exact package version or integrity value. Depending on the local npm configuration and cache state, `npx` can retrieve and execute the package currently resolved by the configured registry. Consequently, the executed installer can differ from the version originally reviewed. The `--force` option further increases the impact by allowing the command to replace an existing Skill installation. There is no evidence in the audited project that the referenced package is currently malicious; the vulnerability is the mutable and insufficiently verified supply-chain boundary. ### Attack Path 1. An attacker compromises the package publication account, registry, package distribution infrastructure, or another component involved in resolving the unpinned `clawhub` package. 2. The attacker publishes a malicious or modified version under the package name resolved by `npx`. 3. A user follows the documented installation command. 4. `npx` downloads and executes the attacker-controlled package with the privileges of the user running the command. 5. The malicious installer can access user-readable files, alter user-writable configuration, execute subprocesses, and replace the existing Skill because `--force` is supplied. ### Impact Assessment Successful exploitation provides code execution under the installing user's account. The resulting access is limited by that account's operating-system permissions, but may include OpenClaw configuration and credentials, files in the user's home directory, netwo ...[truncated 196 chars]
- Remediation
- ## Remediation Suggestions 1. Pin `clawhub` to a specifically reviewed version, for example: ```bash npx --yes clawhub@<reviewed-version> install realmrouter-switch ``` 2. Document the expected npm registry and require installation from that trusted source. 3. Where supported, verify the package using a cryptographic integrity digest or signed release before execution. 4. Remove `--force` from the default instructions. Reserve forced replacement for an explicit recovery or upgrade procedure after informing the user what will be overwritten. 5. Publish and verify package lock or provenance information so users can confirm that the installed artifact matches the audited release. 6. Advise users not to run the installation command with administrator or root privileges unless such privileges are demonstrably required.