← Back to Skills Marketplace
proxymock
by
Matthew LeRay
· GitHub ↗
· v1.0.0
648
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install proxymock
Description
Record, inspect, mock, replay, and generate API traffic using the proxymock CLI. Use when the user wants to capture HTTP/gRPC/database traffic, create mocks...
Usage Guidance
This skill legitimately captures and replays network and database traffic; that is its purpose and it will see full request/response bodies (headers, cookies, auth tokens, DB statements). Before using it: (1) ensure the proxymock binary you run is from a trusted release (the skill has no install step), (2) avoid recording production systems or credentials unless you are sure you want their traffic recorded, (3) be aware that setting proxy env vars or running the app under proxymock will route traffic through the tool and could expose secrets, (4) the SKILL.md declares the proxymock binary as required, but the registry metadata omitted that — treat that as a packaging oversight and confirm the binary is present, and (5) if you plan to use cloud push/pull or proxymock init --api-key, ensure you understand where that API key will be stored (~/.speedscale/config.yaml) and that it is provided only to a trusted service. If you want a lower-risk test, run proxymock against a local staging environment with non-sensitive data first.
Capability Analysis
Type: OpenClaw Skill
Name: proxymock
Version: 1.0.0
The skill bundle exposes the `proxymock` tool, which has high-risk capabilities. Specifically, `proxymock record -- <app-command>` and `proxymock mock -- <app-command>` allow the execution of arbitrary commands as child processes, presenting a significant Remote Code Execution (RCE) risk if the AI agent or user provides untrusted input. Additionally, the tool can manage sensitive items like TLS certificates (`proxymock certs`) and API keys (`proxymock init --api-key <key>`), and interact with external cloud services (`proxymock cloud`). While the `SKILL.md` and other documentation accurately describe these powerful features and do not contain explicit malicious prompt injection, the inherent capabilities of the tool make the skill suspicious due to the potential for misuse or exploitation.
Capability Assessment
Purpose & Capability
Name and description match the instructions and included script: proxymock is explicitly a traffic-recording/replay/mocking CLI and the SKILL.md and script call the proxymock binary and describe ports, RRPair files, and replay workflows. The functionality requested is coherent with the stated purpose.
Instruction Scope
Instructions direct the agent/user to run proxymock to capture inbound/outbound traffic (via local proxies on ports 4140/4143) and to set proxy env vars when not using child-process mode. This is expected for the stated purpose but means the tool will see full request/response payloads (including any secrets) and will change network routing for the processes it wraps.
Install Mechanism
No install spec is included (instruction-only plus a small helper script), so nothing will be automatically downloaded or written at install time. This lowers installer risk. The provided shell script simply calls proxymock and writes a temporary log file.
Credentials
The skill does not declare required env vars or credentials, but the CLI docs mention config paths (~/.speedscale/config.yaml), --api-key, and cloud push/pull commands that would require credentials if used. The SKILL.md metadata also indicates the proxymock binary is required (contradicting the registry 'none' listing). No unrelated secret env vars are demanded, but using the tool can expose any sensitive traffic it proxies.
Persistence & Privilege
always:false and no install-time persistence. The included script writes logs to a temporary file and proxymock itself writes RRPair files under proxymock/ when used; these are normal for a traffic-capture tool and scoped to the user's workspace.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install proxymock - After installation, invoke the skill by name or use
/proxymock - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial public release
Metadata
Frequently Asked Questions
What is proxymock?
Record, inspect, mock, replay, and generate API traffic using the proxymock CLI. Use when the user wants to capture HTTP/gRPC/database traffic, create mocks... It is an AI Agent Skill for Claude Code / OpenClaw, with 648 downloads so far.
How do I install proxymock?
Run "/install proxymock" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is proxymock free?
Yes, proxymock is completely free (open-source). You can download, install and use it at no cost.
Which platforms does proxymock support?
proxymock is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created proxymock?
It is built and maintained by Matthew LeRay (@mleray24); the current version is v1.0.0.
More Skills