ClawHub
Back to skill

Security audit

Tpn Proxy Tool Free

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed SOCKS5 proxy helper with expected API-key and command-line use, but users should avoid sending sensitive traffic through third-party proxy nodes.

Install only if you intend to use a third-party SOCKS5 proxy service. Do not route secrets, session cookies, internal URLs, regulated data, or private test systems through these proxies unless you trust the provider and have explicit approval. Keep TPN_API_KEY in the environment and avoid logging it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Vague Triggers

Medium
Confidence
80% confidence
Finding
The invocation keywords are excessively broad and loosely related, increasing the chance the agent triggers this skill in contexts the user did not intend. Because this skill can generate proxy credentials and route requests through external nodes, accidental invocation could cause unintended network transmission, privacy exposure, or policy bypass behavior.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill encourages proxy-based requests and returns usable proxy credentials without prominently warning that traffic, destinations, and metadata may transit third-party infrastructure. In the context of a proxy tool, missing privacy and data-handling warnings is more dangerous because users may send sensitive URLs, tokens, or internal test targets through untrusted external nodes.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.