← Back to Skills Marketplace
fengzie

Mobazha Tor Browsing

by fengzie · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
100
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install mobazha-tor-browsing
Description
Configure Tor Browser to access Mobazha stores privately, or run a store as a .onion hidden service. Use for privacy and anonymity setup.
Usage Guidance
This skill's goal (using Tor and hosting a Tor hidden service) is plausible, but it instructs you to run a remote installer as root (curl | sudo bash) from an unverified domain and to change system Docker configuration without providing checksums, code, or a project homepage. Before using: (1) demand provenance — a homepage, source repo, release checksums, and signatures for get.mobazha.org; (2) do NOT pipe unknown scripts to sudo — download and inspect the script first or request an install method via a vetted package/repo; (3) ensure you have Docker, docker-compose, curl, and sudo and run the installer in an isolated environment (VM or disposable VPS) first; (4) backup any existing /opt/mobazha data and review the script to confirm it only performs expected actions; (5) prefer manual configuration steps or official packages from the upstream project; (6) separate any hosting instance from your personal identity and payment methods. If the publisher can provide a verifiable repository, release artifacts, and install checksums, the risk assessment could be re-evaluated.
Capability Analysis
Type: OpenClaw Skill Name: mobazha-tor-browsing Version: 0.1.0 The skill bundle provides instructions in SKILL.md for configuring Tor and Lokinet to anonymize 'Mobazha' store traffic. It includes high-risk commands that pipe remote scripts directly into a root shell (curl | sudo bash) from get.mobazha.org. While these are presented as standard installation steps, the execution of unverified remote code with elevated privileges is a significant security risk, and the metadata contains a suspicious future-dated timestamp (2026).
Capability Tags
cryptocan-make-purchases
Capability Assessment
Purpose & Capability
The skill's purpose (Tor browsing and hosting a Tor hidden service for a Mobazha store) aligns with the instructions. However the SKILL.md expects the user to run Docker, docker-compose, sudo, curl and to edit files under /opt/mobazha, yet the skill metadata declares no required binaries, env vars, or config paths. That omission is a coherence issue: the runtime instructions require system-level tools and privileges that are not reflected in the metadata.
Instruction Scope
The instructions tell users to download and execute a remote installer (curl -sSL https://get.mobazha.org/standalone | sudo bash -s -- --overlay tor) which runs code as root. That is outside the narrow scope of merely advising how to use Tor Browser. Other instructions modify /opt/mobazha, set .env, and restart Docker services — all system-level actions. The SKILL.md gives no guidance to verify the downloaded script or its integrity.
Install Mechanism
There is no formal install spec, but the runtime instructions effectively install software by streaming a shell script from get.mobazha.org and executing it with sudo. Download-and-execute from an external URL is high-risk, especially when the domain and script are not accompanied by checksums, signatures, or a verifiable upstream project page.
Credentials
The skill declares no required environment variables or credentials, which is consistent with its purpose. However, it implicitly requires elevated system privileges (sudo), Docker and docker-compose, and write access to /opt/mobazha. Those are reasonable for enabling a hidden service but should be declared explicitly so users know what will be required.
Persistence & Privilege
The skill is not always-enabled and does not request autonomous privileges in metadata. Still, the recommended installer will modify the host (install overlay, generate a hidden-service, restart containers), which grants persistent system changes and long-lived network presence. That behavior is expected for a hosting setup but carries operational risk and should be made explicit.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install mobazha-tor-browsing
  3. After installation, invoke the skill by name or use /mobazha-tor-browsing
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release
Metadata
Slug mobazha-tor-browsing
Version 0.1.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Mobazha Tor Browsing?

Configure Tor Browser to access Mobazha stores privately, or run a store as a .onion hidden service. Use for privacy and anonymity setup. It is an AI Agent Skill for Claude Code / OpenClaw, with 100 downloads so far.

How do I install Mobazha Tor Browsing?

Run "/install mobazha-tor-browsing" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Mobazha Tor Browsing free?

Yes, Mobazha Tor Browsing is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Mobazha Tor Browsing support?

Mobazha Tor Browsing is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Mobazha Tor Browsing?

It is built and maintained by fengzie (@fengzie); the current version is v0.1.0.

💬 Comments