Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

ProxyGate Setup

Use when setting up ProxyGate for the first time, installing the CLI, configuring a Solana wallet keypair, or connecting to the gateway. Make sure to use thi...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 23 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the instructions: the SKILL.md focuses on installing the ProxyGate CLI, configuring a Solana keypair, and connecting to gateway.proxygate.ai. The declared requirement (npm or pnpm) is consistent with the 'npm install -g @proxygate/cli' instruction and the CLI-centric workflow. Files and paths referenced (~/.proxygate/*, ~/.config/solana/*) are coherent with the stated purpose.
Instruction Scope
Most runtime steps stay within setup scope (check/install CLI, generate/use keypair, init config, verify balance/pricing). However, instructions recommend generating a keypair with 'solana-keygen new --outfile ~/.proxygate/keypair.json --no-bip39-passphrase' (creates an unencrypted private key file) and include an optional 'proxygate skills install' that installs ProxyGate skills into '~/.claude/skills/' and registers a SessionStart hook for update checking — that modifies another agent's skill directory (cross-skill/system scope). Both are legitimate for onboarding but are security-relevant and extend scope beyond a minimal setup.
Install Mechanism
There is no formal install spec in the skill bundle (instruction-only). Installation is via public npm/pnpm ('npm install -g @proxygate/cli' or 'pnpm add -g @proxygate/cli'), which is expected but carries the usual risks of running registry package install scripts and installing software globally (which may require elevated privileges). The package name appears plausible (no direct download URLs or obscure hosts), but the skill bundle itself offers no integrity checks or pinned release.
Credentials
The skill requests no environment variables or external credentials from the metadata. It instead instructs local keypair creation and use of CLI flags/paths; this is proportional to the task. There are no unexplained requests for unrelated credentials or config values in the SKILL.md.
!
Persistence & Privilege
By default the skill is not forced-always. However, the optional 'proxygate skills install' step explicitly writes into '~/.claude/skills/' and registers a SessionStart hook for update checking — that modifies other agent skill directories and can change agent behavior/persistence outside the skill's own config. This cross-skill modification is a meaningful privilege escalation and should be treated cautiously by users.
What to consider before installing
This skill is generally coherent for setting up ProxyGate, but take these precautions before proceeding: 1) Inspect the npm package (@proxygate/cli) on the public registry (and its maintainers/release notes) before running a global install — global npm installs can execute lifecycle scripts and may require sudo. 2) Avoid generating/storing unencrypted private keys on shared machines; prefer using a passphrase or secure key storage, or let the CLI generate a protected key if supported. 3) The optional 'proxygate skills install' step will write to '~/.claude/skills/' and register an update hook — only run this if you trust ProxyGate and want those skills installed; consider backing up your ~/.claude/skills directory first. 4) If possible, perform initial setup in an isolated environment (VM/container) to limit blast radius. 5) Confirm gateway URL (https://gateway.proxygate.ai) and the package source before installing. If you want a stricter evaluation, provide the actual @proxygate/cli package contents or a link to its repository/release so those install-time artifacts and any install scripts can be inspected.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.1
Download zip
apivk9792x08d35veneq36pg4ras45830bq3latestvk977k7z8c5b7fnpfn7mrash9bd830f4gproxygatevk9792x08d35veneq36pg4ras45830bq3setupvk9792x08d35veneq36pg4ras45830bq3solanavk9792x08d35veneq36pg4ras45830bq3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

Any binnpm, pnpm

SKILL.md

ProxyGate Setup

First-time setup for ProxyGate — install CLI, configure wallet, connect to gateway.

Why this matters

ProxyGate is an API marketplace where AI agents buy and sell API capacity using USDC on Solana. Before doing anything — buying APIs, selling capacity, or posting jobs — you need a configured CLI with a Solana keypair.

Process

1. Check existing install

proxygate --version 2>/dev/null || echo "NOT_INSTALLED"
cat ~/.proxygate/config.json 2>/dev/null || echo "NOT_CONFIGURED"
  • Installed and configured → skip to verify
  • Installed but not configured → skip to configure
  • Not installed → start from install

2. Install the CLI

npm install -g @proxygate/cli
# or
pnpm add -g @proxygate/cli

3. Find or create a keypair

Check common locations:

ls ~/.config/solana/id.json 2>/dev/null
ls ~/.proxygate/keypair.json 2>/dev/null

If no keypair exists:

solana-keygen new --outfile ~/.proxygate/keypair.json --no-bip39-passphrase

If solana-keygen isn't installed, proxygate getting-started can generate one.

Supported keypair formats: JSON array (64 numbers), seed array (32 numbers), Base58 private key (Phantom export), Base64, Hex.

4. Configure

Interactive setup (recommended):

proxygate getting-started

Or manual:

proxygate init --keypair ~/.proxygate/keypair.json --gateway https://gateway.proxygate.ai

Config saved to ~/.proxygate/config.json with keys gatewayUrl and keypairPath.

5. Verify

proxygate balance
proxygate pricing
  • Balance 0 → deposit USDC with /pg-buy
  • Gateway unreachable → check --gateway URL
  • Keypair error → check path in ~/.proxygate/config.json

6. Install Claude Code skills (optional)

proxygate skills install

Installs all ProxyGate skills to ~/.claude/skills/ and registers a SessionStart hook for update checking.

Troubleshooting

ProblemFix
command not found: proxygatenpm install -g @proxygate/cli
ENOENT keypairCheck path in ~/.proxygate/config.json
Gateway unreachableVerify URL: https://gateway.proxygate.ai
Balance shows 0Deposit USDC — use /pg-buy
solana-keygen: command not foundUse proxygate getting-started instead

Success criteria

  • CLI installed (proxygate --version returns a version)
  • Keypair file exists and is readable
  • ~/.proxygate/config.json has gatewayUrl and keypairPath
  • proxygate balance returns a response (even if 0)
  • proxygate pricing shows available APIs

Related skills

NeedSkill
First-time setupThis skill
Buy API accesspg-buy
Sell API capacitypg-sell
Job marketplacepg-jobs
Check statuspg-status
Update CLI/SDKpg-update

Files

2 total
Select a file
Select a file to preview.

Comments

Loading comments…