proxy-networking

SUSPICIOUS: the skill’s capabilities broadly match its stated purpose, but its preferred install/management path depends on a poorly verifiable root-level remote installer chain for proxy software. Combined with multi-host root SSH access, sensitive link generation, and autonomous infrastructure changes, this creates high security risk without clear evidence of confirmed malware or direct credential exfiltration to attacker-controlled endpoints.

This documentation describes proxy-service installation and configuration; it does not itself contain malware. Its main security concern is downloading a mutable installer from raw.githubusercontent[.]com with certificate verification disabled and executing it as root, which creates a significant installer integrity risk. No credentials or environment variables are targeted, and no exfiltration or destructive activity is shown.