ProxyOps

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This skill appears to be a local proxy inventory tool that stores scoped data locally and does not show exfiltration, hidden execution, or deceptive behavior.

This skill looks safe for its stated local inventory purpose. Review the local storage paths, avoid entering proxy passwords or API tokens into free-text notes, and ensure Python 3 is installed if you want to run the helper scripts.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Proxy inventory details and notes may remain on disk after use and could be read by later workflows or anyone with access to the local workspace files.

Why it was flagged

The skill intentionally persists proxy inventory, sessions, and stats in local memory files. This matches the stated purpose, but proxy host/provider/session metadata may be sensitive and may be reused across future tasks.

Skill content
All data is stored locally only under:
- `~/.openclaw/workspace/memory/proxy/proxies.json`
- `~/.openclaw/workspace/memory/proxy/sessions.json`
- `~/.openclaw/workspace/memory/proxy/stats.json`
Recommendation

Only store proxy metadata you are comfortable persisting locally, avoid putting passwords or tokens in notes, and periodically review or delete the local proxy memory directory if no longer needed.

What this means

The skill may not work as expected unless Python 3 is installed, despite the registry metadata not declaring that requirement.

Why it was flagged

The skill discloses a Python runtime requirement in SKILL.md even though the registry requirements list no required binaries. The included scripts are simple local Python helpers, so this is a metadata completeness issue rather than suspicious behavior.

Skill content
Python 3 must be available as `python3`
Recommendation

Before installing, confirm Python 3 is available if you plan to use the included scripts.