proxyman-download-setup
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads installation files from 'proxyman.com' (the vendor's official domain). This includes DMG files for macOS, EXE installers for Windows, and AppImage files for Linux. These are expected behaviors for a setup skill.
- [REMOTE_CODE_EXECUTION]: The skill performs remote code execution by downloading installers via
curlorInvoke-WebRequestand then executing them (e.g.,Start-Process,hdiutil attach, or running an AppImage). Since these downloads originate from the vendor's trusted domain to facilitate installation, this is considered legitimate functionality. - [COMMAND_EXECUTION]: The skill uses various shell and PowerShell commands to manage the installation process, such as
chmodfor permissions,cpfor file copying, andhdiutilfor mounting disk images on macOS. It also checks system registries on Windows and file paths on Linux/macOS to detect existing versions.
Audit Metadata