ops-proxyns
Fail
Audited by Snyk on Jul 31, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). This content provides deliberate operational security and anonymity techniques (Tor namespace forcing, circuit rotation, stealth headers/jitter) combined with explicit reconnaissance and data-exfiltration examples (fetching target .env and grepping DB_PASSWORD, automated IP rotation to evade detection), indicating intent and usability for malicious abuse.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 1.00). The installation step runs "git clone https://github.com/OkamiW/proxy-ns.git" and then builds/installs the fetched repository, which clearly fetches and executes remote code at runtime (https://github.com/OkamiW/proxy-ns.git), making it a required external dependency.
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs the user/agent to run numerous privileged operations (sudo apt install, sudo cp into /usr/local/bin, sudo tee to /etc/tor/torrc, sudo systemctl restart tor, and repeatedly runs commands via sudo proxy-ns) which modify system files/services and require elevated privileges, thus compromising the machine state.
Issues (3)
E006
CRITICALMalicious code pattern detected in skill scripts.
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata