← Back to Skills Marketplace
TPN Proxy
by
actuallymentor
· GitHub ↗
· v1.1.2
869
Downloads
2
Stars
2
Active Installs
17
Versions
Install in OpenClaw
/install tpn-proxy
Description
Make web requests through decentralized SOCKS5 proxies via the Tao Private Network (TPN). This skill is also known as "TPN", "TPN proxy", "subnet 65", or "SN...
Usage Guidance
This skill appears coherent for its stated purpose, but review a few points before installing: (1) Proxy operators and exit nodes can observe traffic — do not send sensitive data through third-party proxies. (2) Although the SKILL.md contains strict validation and SSRF mitigations, fetching user-specified URLs via decentralized proxies carries residual SSRF/privacy risk (DNS differences or proxy-side routing may expose internal endpoints). (3) Store your TPN_API_KEY securely; the skill will use it to call api.taoprivatenetwork.com and will not echo it. (4) If you plan to let the agent fetch URLs on your behalf, consider restricting allowed domains or requiring explicit confirmation for each external fetch. If you need higher assurance, ask the skill maintainer for an explicit SLA/privacy statement from the TPN provider and for independent security review of the proxy network.
Capability Analysis
Type: OpenClaw Skill
Name: tpn-proxy
Version: 1.1.2
The skill is designed to provide decentralized SOCKS5 proxies and route web traffic through them. While this involves inherently risky capabilities like network access and command execution, the `SKILL.md` instructions and `references/security-assessment.md` explicitly detail robust security mitigations. These include mandatory input validation for all user-provided parameters, strict URL validation to prevent SSRF (rejecting internal IPs, unresolvable hostnames, shell metacharacters), explicit prohibitions against unsafe shell-based JSON parsing methods (favoring `jq` or `format=text`), and secure handling of the `TPN_API_KEY` (never echoed or logged). The instructions actively guide the AI agent to follow secure practices, rather than attempting prompt injection for malicious purposes. There is no evidence of intentional data exfiltration, persistence, or unauthorized control.
Capability Assessment
Purpose & Capability
Name/description (TPN proxy) align with required binary (curl) and the single required environment variable (TPN_API_KEY). The skill only requests what is necessary to call the provider API and return proxy credentials.
Instruction Scope
SKILL.md instructs the agent to call the TPN API, generate proxies, and optionally fetch user-specified URLs through those proxies. The document includes mandatory input validation, explicit JSON/shell guidelines, and an allowlist-style SSRF mitigation scheme. Residual risk: fetching arbitrary URLs through third-party exit nodes can still leak request metadata to the proxy operator and, in uncommon DNS/hosting setups, could enable unintended access — the skill documents mitigations but these cannot eliminate all real-world edge cases.
Install Mechanism
Instruction-only skill with no install spec and no code files. This minimizes disk-write and supply-chain risk.
Credentials
Only a single API key (TPN_API_KEY) is required and declared as the primary credential. No unrelated secrets, signing keys, or extra cloud credentials are requested.
Persistence & Privilege
always:false (no forced presence). The skill does not request elevated runtime privileges or system config paths and does not attempt to modify other skills.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tpn-proxy - After installation, invoke the skill by name or use
/tpn-proxy - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.2
tpn-proxy 1.1.2
- Updated documentation to clarify that agents should use built-in HTTP tools (e.g., WebFetch) when fetching URLs through the proxy, rather than constructing shell commands.
- Enhanced instructions on URL validation and proxy handling when performing web fetches.
- Expanded and reworded some security and process notes in SKILL.md for clarity.
- No functional/logic changes; update is documentation and guidance only.
v1.1.1
tpn-proxy 1.1.1 Changelog
- Updated documentation in `references/security-assessment.md` and `references/x402-examples.md`.
- No changes to skill functionality; this is a documentation update only.
v1.1.0
tpn-proxy 1.1.0
- Updated proxy credential handling: User-facing credentials now use the `socks5h://` scheme to ensure DNS privacy, while agent-side URL fetching uses `socks5://` for authoritative DNS checks.
- Clarified documentation on the distinction between `socks5h://` (user connections) and `socks5://` (agent-webfetch).
- Improved security section to highlight DNS privacy considerations and reinforce input validation requirements.
- Minor language improvements for clarity and accuracy in usage instructions.
v1.0.13
tpn-proxy v1.0.13
- Added a dedicated "Security Posture" section to clarify environment variable handling, secret management, and network behavior.
- Expanded and clarified URL validation requirements, with stricter rules for accepted hostnames—explicitly reject raw IPs and internal hostnames before any proxy fetches.
- Updated input validation and allowlist procedure descriptions, improving defense-in-depth for all proxy/fetch operations.
- Documentation improved for transparency and stronger guidance around safe JSON construction and shell command invocation.
- No functional API changes; changes are documentation and security policy clarifications only.
v1.0.12
tpn-proxy v1.0.12
- Updated the SKILL.md with stricter environment variable security requirements: do not echo, log, or display the actual API key value.
- Enhanced guidance for proxy URL input validation, including protections against metadata endpoints and internal hostnames.
- Clarified and strengthened instructions for validating hostnames, IP addresses, and handling of DNS resolution on the proxy side.
- Minor documentation improvements for clarity, especially around input validation and secure proxy usage.
v1.0.11
tpn-proxy 1.0.11
- Enforced strict input validation and security requirements for all user-provided values and shell commands.
- Added a mandatory validation section detailing rules for `geo`, `minutes`, `connection_type`, `format`, and URL parameters.
- Updated guidance to eliminate unsafe shell command construction and prevent shell injection vulnerabilities.
- Specified safe JSON body assembly for API requests and removed insecure shell-based JSON parsing fallbacks.
- Added references/security-assessment.md documenting the security review and implementation.
v1.0.10
tpn-proxy 1.0.10
- Simplified API key resolution: now uses just the `$TPN_API_KEY` environment variable (OpenClaw populates automatically), removing check of the workspace secrets file.
- Updated setup instructions to point users directly to the environment variable for authentication.
- Minor clarity improvements in procedure steps regarding API key lookup and initial setup.
v1.0.9
tpn-proxy 1.0.9
- Updated authentication instructions: x402 micropayments are now supported as an API key alternative if available.
- Clarified step 1 in the setup procedure, including direct reference to x402.org for decentralized payment.
- No logic or API changes; documentation improvement for user clarity.
v1.0.8
- Updated required environment and tool metadata (`openclaw` block) for clarity and stricter validation.
- Changed description of SOCKS5 credentials to clarify they are temporary and safe to display, not sensitive.
- Refined expected behavior and user guidance to reinforce immediate output of results and discourage instructional responses.
- Simplified and clarified language in various sections for improved readability and accuracy.
- No changes to core logic or API integration—the workflow remains the same.
v1.0.7
**Changelog for tpn-proxy v1.0.7:**
- Simplified and clarified the main SKILL.md instructions.
- Reworded guidance to emphasize that all proxy/API calls should be made by the skill, not deferred to the user.
- Consolidated content by removing references to internal documentation and API/payment flow files.
- Added two new example/reference files for API and x402 usage.
- Updated examples and wording for better readability and user focus.
v1.0.6
- Improved the skill description to clarify usage examples and invocation phrases.
- Updated documentation to specify availability of both commercial and residential exit nodes.
- Added specific example queries to guide user requests.
- Added an explicit "TO LLMS" heading reinforcing that this is an action skill, not for documentation responses.
- Minor edits and clarifications throughout for greater usability and accuracy.
v1.0.5
# tpn-proxy 1.0.5
- Updated SKILL.md with revised instructions, emphasizing step-by-step usage and response details.
- Clarified that SOCKS5 proxy credentials are not sensitive and must always be shown in full.
- Added a strict procedural flow for proxy generation and user interaction—proxy generation, credentials presentation, and fetching URLs now have well-defined steps.
- Expanded response examples for clarity, including new sample user queries and ideal responses.
- Streamlined environment variable/key resolution and format selection steps.
- Removed redundant documentation and condensed explanations for faster comprehension.
v1.0.4
**Strictly enforces action-oriented usage. Documentation is now only for situations where the user can't access the API key.**
- Added clear rule: always call the TPN API and fetch results for the user; never just show documentation or API usage unless the user asks how to do it themselves.
- Included step-by-step logic for selecting the API response format ("text" vs "json") and how to parse results based on available tools (`jq`, `python`, or shell).
- Clarified that documentation/instructions should not be returned to the user by default.
- Highlighted that account setup guidance is the only exception where showing instructions is permitted.
- Updated documentation to ensure user experience is always action-focused.
v1.0.3
tpn-proxy 1.0.3
- Documentation updated: SKILL.md rewritten and expanded for greater clarity.
- No code or behavior changes; update is documentation-only.
- Improved usage instructions, environment variable guidance, and step-by-step integration examples for curl, Node.js, and Python.
- Added clear x402 payment flow summary and referenced detailed documentation.
v1.0.2
**Changelog for tpn-proxy v1.0.2**
- Documents the required environment variable `TPN_API_KEY`, its secrets file location, and the variable resolution order.
- Updates skill metadata with explicit secrets handling details for `TPN_API_KEY`.
- Clarifies that `TPN_API_KEY` is only necessary for the centralized API, not when using the x402 flow.
- Updates example endpoints to use `https://ipv4.icanhazip.com` for IP checks in curl, Node.js, and Python examples.
v1.0.1
- Added documentation for alternate names and aliases (e.g. "TPN", "subnet 65", "SN65") for easier skill discovery and invocation.
- Explained where the TPN API key is stored (`~/.openclaw/workspace/.secrets/tpn.env`) and provided instructions to check this file before prompting users for their API key.
v1.0.0
tpn-proxy v1.0.0
- Initial release of the tpn-proxy skill for web requests via decentralized SOCKS5 proxies on the Tao Private Network (TPN).
- Supports both API key-based centralised authentication and decentralised x402 micropayment flows.
- Guides included for generating and using SOCKS5 proxies with curl, Node.js, and Python.
- Details exposed on proxy lease options, geo-targeting, connection types (residential/datacenter), and credit pricing.
- Provides instructions for setting up an account, acquiring credits, and exploring all supported API endpoints.
- Emphasizes DNS-leak protection by recommending socks5h for all proxy usage.
Metadata
Frequently Asked Questions
What is TPN Proxy?
Make web requests through decentralized SOCKS5 proxies via the Tao Private Network (TPN). This skill is also known as "TPN", "TPN proxy", "subnet 65", or "SN... It is an AI Agent Skill for Claude Code / OpenClaw, with 869 downloads so far.
How do I install TPN Proxy?
Run "/install tpn-proxy" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is TPN Proxy free?
Yes, TPN Proxy is completely free (open-source). You can download, install and use it at no cost.
Which platforms does TPN Proxy support?
TPN Proxy is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created TPN Proxy?
It is built and maintained by actuallymentor (@actuallymentor); the current version is v1.1.2.
More Skills