T08 · Insecure Dependencies
Warning
- Location
DESIGN.md:208- Finding
Unverified third-party binaries installed into a system-wide executable directory
- Content
View full analysis
- Remediation
View remediation
Security audit
OpenClaw Code Search
Security checks for vulnerabilities and agentic risk
Overview
The skill is a coherent read-only code search helper, but its dependency installation guidance includes unverified system-wide binary installs that users should review before installing.
Use the skill only for directories you intend the agent to inspect. Install rg, fd, and tree through trusted package-manager channels where possible; avoid following the fallback curl-and-copy instructions unless you independently verify the downloaded artifacts and approve a system-wide install.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The document title explicitly presents the skill design in Chinese, and the rest of the file is written as Chinese-only documentation without any indication that language is selectable by the user. The policy allows locale constraints only when the skill offers opt-in or clearly justifies a region-specific requirement, neither of which is present here.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 84% confidence
- Finding
This markdown file uses Chinese in the primary title and throughout the requirements, which can impose a specific language on users or maintainers without opt-in. The policy requires flagging language or locale constraints unless the skill offers a choice or clearly justifies the constraint.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The file presents its primary human-facing description and operational comments in Chinese, including the title, usage annotations, and command descriptions. This imposes a specific language on users without any opt-in, fallback, or explanation that the skill is intended only for a Chinese-language context.
- Content
Static analysis
No suspicious patterns detected.