Le Proxy Français
v1.0.0Le Proxy Francais - 3 types de proxy francais (SOCKS5 + Navigateur Playwright). Scraping, monitoring, SEO, social.
⭐ 0· 50·0 current·0 all-time
by@lpf
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (French proxy + Playwright + SOCKS5) align with required pieces: LPF_API_KEY, optional curl/python3/node, PySocks/requests, socks-proxy-agent, and Playwright. Requiring both Python and Node.js is slightly broader than strictly necessary but explains the provided examples for both ecosystems.
Instruction Scope
SKILL.md and examples consistently instruct only to use the LPF_API_KEY with the service endpoints (prx.lv / mut.prx.lv / ded.prx.lv / nav.prx.lv / leproxyfrancais.cloud). No instructions request unrelated files, host credentials, or hidden exfiltration. The README explicitly warns not to send the API key to other domains.
Install Mechanism
Install uses standard package managers (pip, npm) and Playwright. This is expected for browser automation but carries normal risks: Playwright will download browser binaries (large downloads) and pip/npm packages come from public registries. No arbitrary binary URL downloads or obscure hosts were used in the install spec.
Credentials
Only a single credential (LPF_API_KEY) is required and it is the declared primary credential. There are no additional unrelated secrets or config paths requested.
Persistence & Privilege
The skill is not always-enabled and is user-invocable. It permits normal autonomous invocation (disable-model-invocation: false), which is platform default; because this skill can initiate network connections using your API key, you should be aware that an agent invoking it autonomously can cause network activity and consume credits, but the setting itself is not unusual.
Assessment
This skill appears coherent for using the Le Proxy Français service. Before installing: 1) Only provide your LPF_API_KEY if you trust the provider and have obtained the key from the official dashboard (leproxyfrancais.cloud). 2) Prefer setting the API key in a per-skill or ephemeral context rather than storing it in a widely-used global config if you are concerned about leakage. 3) Be aware Playwright will download browser binaries and pip/npm installs run code from public package registries—review those packages if you have strict supply-chain requirements. 4) Because the agent may invoke the skill autonomously, monitor usage/billing on your proxy account (credits can be consumed by automated runs). 5) If you need stronger assurance, verify the service domains (prx.lv and leproxyfrancais.cloud) and consider testing with a limited-capability API key or in a sandbox before full use.examples/socks5.js:6
Environment variable access combined with network send.
Confirmed safe by external scanners
Static analysis detected API credential-access patterns, but both VirusTotal and OpenClaw confirmed this skill is safe. These patterns are common in legitimate API integration skills.Like a lobster shell, security has layers — review code before you run it.
latestvk973f2g2wz15fdt0e29jbk4c5183xp3z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🦞 Clawdis
OSmacOS · Linux · Windows
Any bincurl, python3, node
EnvLPF_API_KEY
Primary envLPF_API_KEY
Install
socks-proxy-agent (Node.js)
npm i -g socks-proxy-agentPySocks + requests (Python)
uv tool install pysocks requestsPlaywright (Python)
Bins: playwright
uv tool install playwrightPlaywright (Node.js)
npm i -g playwright