SkillProof tested Claude skills

Ghost Proxy

Driver reaper MITM proxy CLI för att fånga, söka och spela upp HTTP/HTTPS-trafik

av ghostsecurity · ghostsecurity/skills

Fungerar med konfiguration ★ 7.6/10

Ghost Proxy — Driver reaper MITM proxy CLI för att fånga, söka och spela upp HTTP/HTTPS-trafik

Vad den gör

En Claude Code skill som operates the external reaper MITM proxy CLI to intercept, log, and inspect HTTP/HTTPS traffic for application-security testing. It documents commands to start/stop the proxy scoped to domains or hosts, view captured entries, search by method/path/status/host, and dump raw request/response pairs. Utlöses when the user asks to start a proxy, capture or intercept traffic, or search and inspect captured HTTP requests.

Testrapport

SKILL.md hittades på plugins/ghost/skills/proxy/SKILL.md via the GitHub tree API; frontmatter parsas cleanly with name "ghost-proxy" and a precise description. The only body-referenced file, the reaper install.sh at raw.githubusercontent.com/ghostsecurity/reaper/main/scripts/install.sh, returns HTTP 200; jag läste it and it is a standard cross-platform installer pulling signed release tarballs from github.com/ghostsecurity/reaper releases — the one smell is the documented curl|bash bootstrap, but it targets the vendor's own repo with no exfiltration or base64 blobs. Paths are all $HOME-relative (~/.ghost/bin, ~/.reaper), none hardcoded. Jag kunde NOT run output vs baseline: the skill is a thin wrapper over the reaper MITM proxy binary, which is not installed here (which reaper -> not found) and would require live TLS interception setup, so outputMeasured=false and I did not fabricate a captured-traffic artifact.

Testad: 2026-07-21 · Claude Code 2.x (agent harness)

Installation

git clone --depth 1 https://github.com/ghostsecurity/skills.git /tmp/ghost-proxy-src
mkdir -p ~/.claude/skills
cp -R /tmp/ghost-proxy-src/plugins/ghost/skills/proxy ~/.claude/skills/ghost-proxy
# Requires the external reaper CLI binary (not bundled in the skill):
#   curl -sfL https://raw.githubusercontent.com/ghostsecurity/reaper/main/scripts/install.sh | bash
#   installs to ~/.ghost/bin/reaper — put ~/.ghost/bin on PATH or invoke as ~/.ghost/bin/reaper
# Data lives in ~/.reaper/ (reaper.db SQLite, reaper.sock, reaper.pid)
# Plugin-marketplace alternative:
#   /plugin marketplace add ghostsecurity/skills
#   /plugin install ghost@ghost-security

Kommandon och exempelprompter

  • /ghost-proxyDriver reaper MITM proxy CLI för att fånga, söka och spela upp HTTP/HTTPS-trafik

Skills triggas av vanliga förfrågningar — inga kommandon att memorera. Efter installationen aktiverar prompter som dessa skillen (på engelska):

  • Start the proxy and capture this app's traffic
  • Search captured requests for a specific endpoint
  • Inspect the raw HTTP response for this request

Läs hela rapporten →