← 返回 Skills 市场

AdGuard Home Manager

Name: AdGuard Home Manager
Author: kryzl19

作者 KRYZL19 · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

115

总下载

当前安装

版本数

在 OpenClaw 中安装

/install adguard-home-manager

功能描述

Manage AdGuard Home network-wide DNS ad blocking. Query blocklist stats, add/remove custom DNS rules, check filtering status, and view top blocked domains fr...

使用说明 (SKILL.md)

AdGuard Home

Manage AdGuard Home — the network-wide DNS server that blocks ads, trackers, and malware for your entire network.

Setup

Install AdGuard Home on your VPS or home server
Create a user for the agent: Settings → AdGuard Home → Users → Add User
Get your base URL (e.g. http://192.168.1.1:3000 or https://your-vps.example.com)
Export env vars:

export ADGUARD_USERNAME=your_username
export ADGUARD_PASSWORD=your_password
export ADGUARD_BASE_URL=http://192.168.1.1:3000

Tools

`status`

Get overall AdGuard Home status — DNS status, filtering enabled, protection level.

adguard-home-status

`stats`

Get filtering statistics: total blocked, allowed, queries today, top blocked domains.

adguard-home-stats [period]   # period: hour, day, week, month, year (default: day)

`blocked_domains`

Get the most frequently blocked domains.

adguard-home-blocked-domains [limit]   # default: 20

`add_rule`

Add a custom DNS blocking rule.

adguard-home-add-rule "\x3Cdomain or rule>"
# Examples:
#   adguard-home-add-rule "example.com"           # block single domain
#   adguard-home-add-rule "||example.com^"       # AdGuard blocking syntax
#   adguard-home-add-rule "@||example.com^"      # allowlist exception

`remove_rule`

Remove a custom DNS rule by content.

adguard-home-remove-rule "\x3Crule>"

`list_rules`

List all custom DNS rewrite rules.

adguard-home-list-rules

`query_log`

Query the DNS query log — find what domains were resolved on the network.

adguard-home-query-log [domain_filter] [limit]
# Example: adguard-home-query-log "ads" 50

`toggle_filtering`

Enable or disable DNS filtering (ad blocking).

adguard-home-toggle-filtering true   # or false

Notes

AdGuard Home API: https://github.com/AdguardTeam/AdGuardHome/wiki/Config#web-interface
Authentication uses HTTP Basic Auth with username:password
Rate limiting: avoid querying the query_log with very large limits
DNS rewrite rules can create custom DNS responses (A, AAAA, CNAME records)

安全使用建议

This skill appears to do exactly what it says: manage a self‑hosted AdGuard Home via its HTTP API using the provided credentials. Before installing: (1) only provide ADGUARD_USERNAME/ADGUARD_PASSWORD for a trusted AdGuard server (use HTTPS for remote servers); (2) prefer creating a dedicated account with only the permissions the agent needs (note: adding/removing rules and toggling filtering require write/admin rights); (3) review the included scripts yourself (they attempt multiple AdGuard endpoints and may behave differently across AdGuard versions); (4) avoid using this skill with highly privileged credentials on untrusted networks and rotate the password if it is later shared or exposed. If you need stricter safety, run the scripts manually or use a read‑only account for monitoring actions and a separate admin account only when you explicitly approve changes.

功能分析

Type: OpenClaw Skill Name: adguard-home-manager Version: 1.0.0 The skill bundle provides legitimate tools for managing AdGuard Home, but it contains a significant security vulnerability in `scripts/rules.sh`. The script unsafely interpolates the `$RULE` variable directly into `jq` filters and JSON payloads (e.g., using `"rule": "'"$RULE"'"`), which allows for JSON injection or potential command injection if the input is crafted to break out of the shell quotes. While the behavior aligns with the stated purpose, the lack of input sanitization in a script handling network configuration is a high-risk flaw.

能力评估

✓ Purpose & Capability

The name/description match the requested environment variables (ADGUARD_USERNAME, ADGUARD_PASSWORD, ADGUARD_BASE_URL) and required binaries (curl, jq). Those credentials are exactly what is needed to call the AdGuard Home HTTP API; nothing extraneous is requested.

✓ Instruction Scope

SKILL.md and the included scripts only call endpoints under ADGUARD_BASE_URL and use Basic Auth; they query status/stats, manage filtering rules, and toggle DNS filtering as described. The instructions do not attempt to read unrelated files or environment variables, nor do they transmit data to third‑party endpoints beyond the provided base URL.

✓ Install Mechanism

There is no install step (instruction-only with bundled scripts). No external downloads or archive extraction are performed by the skill itself. The only runtime dependencies are curl and jq, which are declared.

✓ Credentials

The skill requires three env vars which are proportionate to its function. The primary secret (ADGUARD_PASSWORD) is appropriate. No unrelated credentials or broad system config paths are requested.

✓ Persistence & Privilege

always is false and autonomous invocation is the platform default. The skill does not attempt to modify other skills or system‑wide settings and does not request persistent elevated privileges.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install adguard-home-manager
安装完成后，直接呼叫该 Skill 的名称或使用 /adguard-home-manager 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of AdGuard Home Manager skill. - Manage AdGuard Home server via API: query status, stats, rules, and logs. - Add, remove, and list custom DNS blocking rules. - View top blocked domains and recent DNS queries. - Enable or disable DNS filtering protection. - Requires environment config: username, password, server URL.

元数据

Slug adguard-home-manager

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题