← 返回 Skills 市场
fengzie

Mobazha Tor Browsing

作者 fengzie · GitHub ↗ · v0.1.0 · MIT-0
cross-platform ⚠ suspicious
100
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mobazha-tor-browsing
功能描述
Configure Tor Browser to access Mobazha stores privately, or run a store as a .onion hidden service. Use for privacy and anonymity setup.
安全使用建议
This skill's goal (using Tor and hosting a Tor hidden service) is plausible, but it instructs you to run a remote installer as root (curl | sudo bash) from an unverified domain and to change system Docker configuration without providing checksums, code, or a project homepage. Before using: (1) demand provenance — a homepage, source repo, release checksums, and signatures for get.mobazha.org; (2) do NOT pipe unknown scripts to sudo — download and inspect the script first or request an install method via a vetted package/repo; (3) ensure you have Docker, docker-compose, curl, and sudo and run the installer in an isolated environment (VM or disposable VPS) first; (4) backup any existing /opt/mobazha data and review the script to confirm it only performs expected actions; (5) prefer manual configuration steps or official packages from the upstream project; (6) separate any hosting instance from your personal identity and payment methods. If the publisher can provide a verifiable repository, release artifacts, and install checksums, the risk assessment could be re-evaluated.
功能分析
Type: OpenClaw Skill Name: mobazha-tor-browsing Version: 0.1.0 The skill bundle provides instructions in SKILL.md for configuring Tor and Lokinet to anonymize 'Mobazha' store traffic. It includes high-risk commands that pipe remote scripts directly into a root shell (curl | sudo bash) from get.mobazha.org. While these are presented as standard installation steps, the execution of unverified remote code with elevated privileges is a significant security risk, and the metadata contains a suspicious future-dated timestamp (2026).
能力标签
cryptocan-make-purchases
能力评估
Purpose & Capability
The skill's purpose (Tor browsing and hosting a Tor hidden service for a Mobazha store) aligns with the instructions. However the SKILL.md expects the user to run Docker, docker-compose, sudo, curl and to edit files under /opt/mobazha, yet the skill metadata declares no required binaries, env vars, or config paths. That omission is a coherence issue: the runtime instructions require system-level tools and privileges that are not reflected in the metadata.
Instruction Scope
The instructions tell users to download and execute a remote installer (curl -sSL https://get.mobazha.org/standalone | sudo bash -s -- --overlay tor) which runs code as root. That is outside the narrow scope of merely advising how to use Tor Browser. Other instructions modify /opt/mobazha, set .env, and restart Docker services — all system-level actions. The SKILL.md gives no guidance to verify the downloaded script or its integrity.
Install Mechanism
There is no formal install spec, but the runtime instructions effectively install software by streaming a shell script from get.mobazha.org and executing it with sudo. Download-and-execute from an external URL is high-risk, especially when the domain and script are not accompanied by checksums, signatures, or a verifiable upstream project page.
Credentials
The skill declares no required environment variables or credentials, which is consistent with its purpose. However, it implicitly requires elevated system privileges (sudo), Docker and docker-compose, and write access to /opt/mobazha. Those are reasonable for enabling a hidden service but should be declared explicitly so users know what will be required.
Persistence & Privilege
The skill is not always-enabled and does not request autonomous privileges in metadata. Still, the recommended installer will modify the host (install overlay, generate a hidden-service, restart containers), which grants persistent system changes and long-lived network presence. That behavior is expected for a hosting setup but carries operational risk and should be made explicit.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install mobazha-tor-browsing
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /mobazha-tor-browsing 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release
元数据
Slug mobazha-tor-browsing
版本 0.1.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Mobazha Tor Browsing 是什么?

Configure Tor Browser to access Mobazha stores privately, or run a store as a .onion hidden service. Use for privacy and anonymity setup. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 100 次。

如何安装 Mobazha Tor Browsing?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install mobazha-tor-browsing」即可一键安装,无需额外配置。

Mobazha Tor Browsing 是免费的吗?

是的,Mobazha Tor Browsing 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Mobazha Tor Browsing 支持哪些平台?

Mobazha Tor Browsing 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Mobazha Tor Browsing?

由 fengzie(@fengzie)开发并维护,当前版本 v0.1.0。

💬 留言讨论