Tailscale

Manage Tailscale tailnet via CLI and API. Use when the user asks to "check tailscale status", "list tailscale devices", "ping a device", "send file via tailscale", "tailscale funnel", "create auth key", "check who's online", or mentions Tailscale network management.

Install only if you intend to let the agent help administer your Tailscale tailnet. Keep the Tailscale API key scoped and protected, review commands before running them, and be especially careful with Funnel, device deletion, MagicDNS changes, ACL access, and auth key creation because those can expose services, remove devices, or grant network access.

Type: OpenClaw Skill Name: tailscale Version: 1.0.0 The skill provides extensive capabilities for managing a Tailscale network, including file transfer (`tailscale file cp`), public service exposure (`tailscale funnel`), creation of API keys (`ts-api.sh create-key`), and authorization/deletion of devices (`ts-api.sh authorize`/`delete`). While these are legitimate administrative functions of Tailscale, they represent high-risk capabilities that, if misused by a malicious user or a compromised agent, could lead to significant harm (e.g., data exfiltration, unauthorized network exposure, creation of backdoors). The `SKILL.md` and `scripts/ts-api.sh` files themselves do not show clear evidence of intentional malicious behavior or prompt injection attempts; they correctly implement the stated purpose. However, the inherent power and potential for misuse of these capabilities classify the skill as suspicious rather than benign.