URnetwork

Create and manage HTTPS, SOCKS, or WireGuard proxies via URnetwork API to connect anonymously through specific countries, regions, or cities worldwide.

This skill appears to be what it says (tools to create proxies), but exercise caution before installing or using it: 1) The skill has no listed source or homepage — verify the referenced GitHub repo and the bringyour.com domains independently before trusting them. 2) It will ask you (or your agent) for an auth code which is exchanged for a JWT — treat that auth code/JWT as sensitive credentials. Do not provide permanent account credentials unless you trust the service. 3) Ask what the auth code's scope and lifetime are and prefer short-lived tokens; if unsure, do not proceed. 4) Avoid instructing the agent to store JWTs persistently unless you know where/how they will be stored and protected; plan a token revocation process. 5) Because the skill can create many egress proxies, consider whether its capabilities could be abused (rate limits, account misuse, or anonymous access to restricted resources). If you need this functionality, verify the service's legitimacy and prefer official clients or direct API integration with explicit credential handling rather than trusting an unproven skill.

Type: OpenClaw Skill Name: proxy-vpn Version: 1.0.0 The skill is suspicious due to its instruction to apply a complete WireGuard configuration (`wg_config.config`) received from an external API (`api.bringyour.com`). While this capability is central to the skill's stated purpose of providing VPN services, it grants significant system-level control over the agent's network stack to an external entity. If the external API were compromised or malicious, it could provide a harmful WireGuard configuration, leading to network redirection, DNS hijacking, or other forms of system compromise. This represents a high-risk capability and a vulnerability in the trust model, even without explicit malicious intent within the skill bundle itself.