Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Vpn Proxy Manager

v1.0.0

V2Ray代理管理 - 自动开关代理、根据网络状况自动配置系统代理 / V2Ray Proxy Management - Auto start/stop proxy based on network conditions

0· 415·0 current·0 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The script's actions (start/stop V2Ray, set/clear system proxy, auto-check network, wrap commands) match the skill name and description. Minor mismatch: the metadata declares no required binaries, but the script relies on common utilities (curl, pgrep/pkill, nohup, pkill) and a local V2Ray/Xray binary; the README asks the user to edit V2RAY_DIR to point to a local installation.
Instruction Scope
SKILL.md simply instructs the agent/user to run the provided script. The script checks connectivity (curl to github.com/google.com), manages environment proxy variables, persists a marker to ~/.bashrc, launches/stops local binaries, and supports 'wrap' which runs arbitrary shell commands via eval — that last point grants the ability to execute any command the agent passes to the script (this is intended for the feature but expands execution scope).
Install Mechanism
No install spec; instruction-only skill with an included shell script. Nothing is downloaded or installed automatically by the skill.
Credentials
The skill requests no credentials and does not contact unknown remote endpoints (only checks github.com and google.com). It does, however, set proxy-related environment variables during execution and appends a V2RAY_PROXY line to the user's ~/.bashrc to persist a marker — this is environment modification but aligns with its purpose.
!
Persistence & Privilege
Although 'always' is false, the script modifies a user file (~/.bashrc) to persist V2RAY_PROXY, and it can start background processes (v2rayN/xray). Modifying shell startup files and launching background binaries are significant persistent actions the user should review and consent to.
Assessment
This skill appears to do what it says: control a local V2Ray/Xray proxy and toggle system proxy settings. Before installing or letting an agent run it: - Manually inspect and edit scripts/v2ray-proxy.sh to set V2RAY_DIR to your V2Ray/Xray installation (ensure you trust that binary). - Note the script expects utilities like curl, pgrep/pkill, nohup; ensure those exist in your environment. - The script appends a line to ~/.bashrc; back up that file if you care about preserving your shell config. - The 'wrap' command runs arbitrary shell commands via eval — do not allow untrusted agents or workflows to call wrap with unreviewed arguments. - If you want less persistence, remove the ~/.bashrc write or change it to a safer mechanism. If you have an automated agent, restrict when/how it can invoke this skill (or require manual invocation) to limit unwanted command execution or environment changes.

Like a lobster shell, security has layers — review code before you run it.

latestvk977cmj39hqxtnx1qknbsq9x9582bf8b
415downloads
0stars
1versions
Updated 7h ago
v1.0.0
MIT-0

V2Ray 代理管理 / V2Ray Proxy Management

管理 V2Ray 代理的自动开关,根据网络状况自动配置系统代理。

Manage V2Ray proxy auto start/stop and system proxy configuration based on network conditions.

功能 / Features

  • 🚀 启动/停止 V2Ray / Start/Stop V2Ray
  • 🌐 自动配置/清除系统代理 / Auto configure/clear system proxy
  • 🔄 自动模式(根据网络状况自动开关)/ Auto mode (auto switch based on network)
  • 📊 状态查看和连接测试 / Status check and connection test

配置 / Configuration

  • V2Ray位置 / Location: /media/felix/d/v2rayN-linux-64/
  • 代理端口 / Proxy port: 10808

使用 / Usage

# 开启代理 / Enable proxy
./scripts/v2ray-proxy.sh on

# 关闭代理 / Disable proxy  
./scripts/v2ray-proxy.sh off

# 自动模式 / Auto mode
./scripts/v2ray-proxy.sh auto

# 查看状态 / Check status
./scripts/v2ray-proxy.sh status

Comments

Loading comments...