proxyman-download-setup

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill includes a CLI example that passes a certificate password as a literal command-line argument (--password "password"), which would require the agent to include secret values verbatim in its output if a real password is substituted.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill directly downloads and then runs remote installer binaries during runtime from https://proxyman.com/release/osx/Proxyman_latest.dmg, https://proxyman.com/release/windows/Proxyman_latest.dmg, and https://proxyman.com/release/linux/proxyman_latest which executes remote code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). This skill instructs the agent/user to install privileged components (a macOS Helper Tool), copy an app into /Applications, and install/trust root certificates (including recommending elevated flows), which modify system-wide state and can affect security/trust on the host.