Create custom http.Agent.

PassAudited by ClawScan on May 16, 2026.

Overview

This is an instruction-only Node.js HTTP agent/proxy coding guide with no executable payload, credentials, or persistence.

This appears safe as a coding reference. Before installing any suggested npm package or using generated proxy code, verify the dependency and review how traffic will be routed, especially in production or corporate network environments.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If applied incorrectly, generated proxy or socket code could route requests through the wrong proxy or affect application connectivity.

Why it was flagged

The skill's purpose is to help create custom network routing/proxy code. This is disclosed and purpose-aligned, but users should review generated code because it can change how application traffic is routed.

Skill content
Use when the user needs to write HTTP/HTTPS/SOCKS/PAC proxies, custom HTTP connection logic, or extend `http.Agent`.
Recommendation

Use it for intended networking tasks, and review proxy destinations, TLS handling, and routing rules before putting generated code into production.

What this means

Following the examples may add third-party packages to a project, with the normal supply-chain risks of npm dependencies.

Why it was flagged

The documentation suggests installing third-party npm packages. These are relevant to the stated proxy-agent purpose and are not automatically installed by the skill, but they are external dependencies the user would add to their own project.

Skill content
**Installation**: `npm install http-proxy-agent` ... **Installation**: `npm install pac-proxy-agent` ... **Installation**: `npm install socks-proxy-agent`
Recommendation

Verify package names and maintainers, prefer pinned versions or lockfiles, and review dependency changes before installing.