Anyone Procotol Proxy
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is a coherent, instruction-only guide for installing and running a local Anyone Protocol SOCKS5 proxy, with no evidence of hidden behavior or data theft.
This skill appears benign and purpose-aligned, but it depends on an external NPM package and starts a local SOCKS5 proxy. Before installing, verify the package source, understand that requests routed through the proxy will use the Anyone Network, and stop the proxy when you are done.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the package gives externally supplied code the ability to run on the user's machine.
The skill asks the user to install an external NPM package globally. This is central to the skill's purpose, but it is still a supply-chain dependency users should verify.
npm install -g @anyone-protocol/anyone-client
Verify the NPM package publisher and version before installing, and prefer a pinned or locally reviewed version where possible.
Running the command starts local software that can route network traffic through the Anyone Network.
The skill instructs the user to execute the external client to start a local SOCKS5 proxy. This command execution is disclosed and necessary for the stated proxy function.
npx @anyone-protocol/anyone-client -s 9050
Run the command only when you intend to use the proxy, and stop the process when finished.
The proxy may continue operating after a single request unless the user stops it.
The proxy is designed to keep running across requests. This is expected for a proxy service, but it is a persistent local process users should be aware of.
The proxy persists across requests once started
Stop the proxy when it is no longer needed and avoid leaving it running unnecessarily.