← Back to Skills Marketplace
yonghaozhao722

Clash Node Manager

by Yonghao Zhao · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
815
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install clash-node-manager
Description
Manages Clash proxy nodes by listing current node status, available nodes in groups, and switching to specified nodes by name or index.
README (SKILL.md)

Clash Node Manager

Overview

This skill enables you to manage your Clash proxy nodes using check_clash.py. You can list available nodes, check the connection status of the current node, and switch to a different node.

Usage

Checking Node Status (Default)

To check the status of Clash nodes, ask:

"Check Clash node status"

This will execute python check_clash.py.

Listing Available Nodes

To list available nodes in the GLOBAL group, ask:

"List available Clash nodes"

This will execute python check_clash.py --list

To list available nodes in a specific group, ask:

"List available nodes in group \x3Cgroup_name>"

Replace \x3Cgroup_name> with the name of the group. This will execute python check_clash.py --group \x3Cgroup_name> --list

Switching to a Node

To switch to a specific node, ask:

"Switch to node \x3Cnode_name>"

Replace \x3Cnode_name> with the name of the node you want to switch to. This will execute python check_clash.py --switch \x3Cnode_name>.

Switching to a Node by Index

To switch to a node by its index in the list, ask:

"Switch to node at index \x3Cindex>"

Replace \x3Cindex> with the index of the node in the list. This will execute python check_clash.py --switch-by-index \x3Cindex>.

Resources

  • check_clash.py: Python script for checking and switching Clash proxy nodes.
Usage Guidance
This skill appears to do what it says: it calls the local Clash HTTP API to list and switch proxy nodes. Before installing, confirm you run Clash with its API enabled at the default address (127.0.0.1:9090) or know how to pass a custom API URL/secret to the script. Note that the script uses the requests Python package (the manifest only lists python3), so the runtime environment needs that dependency. Because the skill can change your proxy selection, only install it if you trust the included code and the listed author/repository. If you need stronger assurances, review the full check_clash.py source (already included) or run it locally in a controlled environment first.
Capability Analysis
Type: OpenClaw Skill Name: clash-node-manager Version: 1.0.0 The skill is classified as suspicious due to two primary vulnerabilities. Firstly, the `SKILL.md` instructions directly embed user-provided input (e.g., `<node_name>`, `<group_name>`) into shell commands, creating a prompt injection risk that could lead to arbitrary command execution if the AI agent does not properly sanitize or quote the input. Secondly, the `check_clash.py` script allows specifying an arbitrary `--api-url`, which introduces a Server-Side Request Forgery (SSRF) vulnerability. An attacker could exploit this to make the agent send requests to internal network resources or other local services, potentially leading to information disclosure. There is no clear evidence of intentional malicious behavior like data exfiltration to external servers or persistence mechanisms.
Capability Assessment
Purpose & Capability
Name/description match the included code and SKILL.md: the Python script queries and manipulates Clash via the local API (default http://127.0.0.1:9090). The manifest lists python3 as a tool and a plausible upstream repo. No unrelated credentials, cloud services, or binaries are requested.
Instruction Scope
SKILL.md instructs the agent to run check_clash.py with a small set of flags (list, switch, switch-by-index). The script only performs HTTP requests to the local Clash API endpoints (/version, /proxies, /connections, and PUT to /proxies/<group>) and prints results. It does not read arbitrary files or transmit data to external endpoints.
Install Mechanism
There is no remote download/install step; the skill is instruction-only and includes the script in the package. The manifest's install destination is a local path and does not pull code from external, untrusted URLs. This is low-risk from an install perspective.
Credentials
The skill declares no required environment variables or credentials, which is appropriate. The script supports an optional 'secret' (Clash API bearer token) and a custom API URL, but SKILL.md does not document how to supply them; this is a minor documentation mismatch (functional, not obviously malicious).
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent elevated privileges or claim to modify other skills or system-wide configuration beyond interacting with the local Clash API (which is its stated purpose).
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install clash-node-manager
  3. After installation, invoke the skill by name or use /clash-node-manager
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of clash-node-manager. - Manage Clash proxy nodes: list nodes, view status, and switch between nodes. - Supports listing available nodes globally or within specific groups. - Enables switching to a node by name or by index. - Provides command examples for each function. - Uses check_clash.py as the underlying script.
Metadata
Slug clash-node-manager
Version 1.0.0
License
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Clash Node Manager?

Manages Clash proxy nodes by listing current node status, available nodes in groups, and switching to specified nodes by name or index. It is an AI Agent Skill for Claude Code / OpenClaw, with 815 downloads so far.

How do I install Clash Node Manager?

Run "/install clash-node-manager" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Clash Node Manager free?

Yes, Clash Node Manager is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Clash Node Manager support?

Clash Node Manager is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Clash Node Manager?

It is built and maintained by Yonghao Zhao (@yonghaozhao722); the current version is v1.0.0.

💬 Comments