proxymock

Record, inspect, mock, replay, and generate API traffic using the proxymock CLI. Use when the user wants to capture HTTP/gRPC/database traffic, create mocks...

This skill legitimately captures and replays network and database traffic; that is its purpose and it will see full request/response bodies (headers, cookies, auth tokens, DB statements). Before using it: (1) ensure the proxymock binary you run is from a trusted release (the skill has no install step), (2) avoid recording production systems or credentials unless you are sure you want their traffic recorded, (3) be aware that setting proxy env vars or running the app under proxymock will route traffic through the tool and could expose secrets, (4) the SKILL.md declares the proxymock binary as required, but the registry metadata omitted that — treat that as a packaging oversight and confirm the binary is present, and (5) if you plan to use cloud push/pull or proxymock init --api-key, ensure you understand where that API key will be stored (~/.speedscale/config.yaml) and that it is provided only to a trusted service. If you want a lower-risk test, run proxymock against a local staging environment with non-sensitive data first.

Type: OpenClaw Skill Name: proxymock Version: 1.0.0 The skill bundle exposes the `proxymock` tool, which has high-risk capabilities. Specifically, `proxymock record -- <app-command>` and `proxymock mock -- <app-command>` allow the execution of arbitrary commands as child processes, presenting a significant Remote Code Execution (RCE) risk if the AI agent or user provides untrusted input. Additionally, the tool can manage sensitive items like TLS certificates (`proxymock certs`) and API keys (`proxymock init --api-key <key>`), and interact with external cloud services (`proxymock cloud`). While the `SKILL.md` and other documentation accurately describe these powerful features and do not contain explicit malicious prompt injection, the inherent capabilities of the tool make the skill suspicious due to the potential for misuse or exploitation.