Vpn Proxy Manager

V2Ray代理管理 - 自动开关代理、根据网络状况自动配置系统代理 / V2Ray Proxy Management - Auto start/stop proxy based on network conditions

This skill appears to do what it says: control a local V2Ray/Xray proxy and toggle system proxy settings. Before installing or letting an agent run it: - Manually inspect and edit scripts/v2ray-proxy.sh to set V2RAY_DIR to your V2Ray/Xray installation (ensure you trust that binary). - Note the script expects utilities like curl, pgrep/pkill, nohup; ensure those exist in your environment. - The script appends a line to ~/.bashrc; back up that file if you care about preserving your shell config. - The 'wrap' command runs arbitrary shell commands via eval — do not allow untrusted agents or workflows to call wrap with unreviewed arguments. - If you want less persistence, remove the ~/.bashrc write or change it to a safer mechanism. If you have an automated agent, restrict when/how it can invoke this skill (or require manual invocation) to limit unwanted command execution or environment changes.

Type: OpenClaw Skill Name: vpn-proxy-manager Version: 1.0.0 The script 'scripts/v2ray-proxy.sh' contains a critical shell injection vulnerability in the 'wrap' function, which uses 'eval' on unsanitized input, potentially allowing arbitrary command execution. It also performs invasive actions such as modifying the user's '~/.bashrc' for persistence and relies on hardcoded absolute paths for binary execution (e.g., '/media/felix/d/v2rayN-linux-64/'). While these appear to be functional choices for a proxy manager rather than intentional malware, they represent significant security risks.