ops-proxyns

Fail

Audited by Snyk on Jul 31, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 1.00). This content provides deliberate operational security and anonymity techniques (Tor namespace forcing, circuit rotation, stealth headers/jitter) combined with explicit reconnaissance and data-exfiltration examples (fetching target .env and grepping DB_PASSWORD, automated IP rotation to evade detection), indicating intent and usability for malicious abuse.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).


MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs the user/agent to run numerous privileged operations (sudo apt install, sudo cp into /usr/local/bin, sudo tee to /etc/tor/torrc, sudo systemctl restart tor, and repeatedly runs commands via sudo proxy-ns) which modify system files/services and require elevated privileges, thus compromising the machine state.

Issues (3)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 31, 2026, 04:51 PM
Issues
3
Security Audit — snyk — ops-proxyns