T08 · Insecure Dependencies
Warning
- Location
SKILL.md:19- Finding
Dynamic Installation of Unverified Third-Party Skills
- Content
View full analysis
" ``` ```bash clawhub install ``` ```bash clawhub install --version ``` The command reference also exposes installation and update operations: ```bash clawhub search "" clawhub install clawhub install --version clawhub list clawhub update clawhub update --all ``` The policy at lines 108-109 requires a recommendation before installation unless the user requests direct installation, but defaults to the latest stable version rather than a previously reviewed and pinned version. ### Technical Analysis The skill directs the agent to discover and install third-party skills from ClawHub without requiring verification of the package publisher, source repository, cryptographic signature, checksum, requested permissions, installation hooks, or bundled scripts. User confirmation reduces the likelihood of an unexpected installation but does not establish that the selected package is trustworthy. Search-based selection can expose the workflow to typosquatting, misleading package descriptions, compromised publishers, dependency confusion, or malicious packages optimized to rank for relevant keywords. Defaulting to the latest version also creates a time-of-check/time-of-use supply-chain risk. Even if an earlier release was reviewed, a later release can contain materially different instructions or executable content. The documented `clawhub update --all` operation compounds this issue by permitting multiple installed components to change without individual review. ### Attack Path 1. An attacker publishes a malicious skill under a plausible slug, compromises an existing publisher, or releases a m ...[truncated 1474 chars]- Remediation
View remediation