ops-proxyns
Fail
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones source code from an untrusted third-party repository not associated with known vendors.\n
- Evidence: 'git clone https://github.com/OkamiW/proxy-ns.git /tmp/proxy-ns' in SKILL.md.\n- [REMOTE_CODE_EXECUTION]: The skill builds and installs the downloaded software, executing code derived from an external untrusted source.\n
- Evidence: 'CGO_ENABLED=0 make' followed by 'sudo cp proxy-ns /usr/local/bin/' in SKILL.md.\n
- Evidence: The verification command 'curl ... | python3 -m json.tool' pipes network output directly into the Python interpreter module.\n- [COMMAND_EXECUTION]: The skill makes extensive use of 'sudo' to gain elevated system privileges, including for the installation of binaries and the modification of system configurations.\n
- Evidence: 'sudo apt update', 'sudo cp proxy-ns /usr/local/bin/', and 'sudo tee /etc/tor/torrc' in SKILL.md.\n
- Evidence: 'sudo proxy-ns $SHELL' launches a root-privileged shell context for all subsequent commands.\n- [DATA_EXFILTRATION]: The skill provides instructions and examples for identifying and extracting sensitive credentials from target environments.\n
- Evidence: 'curl ... "https://$TARGET/.env" | grep -i "DB_PASSWORD"' in SKILL.md.
Recommendations
- HIGH: Downloads and executes remote code from: http://127.0.0.1:8080 - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata