← 返回 Skills 市场
TPN Proxy
作者
actuallymentor
· GitHub ↗
· v1.1.2
869
总下载
2
收藏
2
当前安装
17
版本数
在 OpenClaw 中安装
/install tpn-proxy
功能描述
Make web requests through decentralized SOCKS5 proxies via the Tao Private Network (TPN). This skill is also known as "TPN", "TPN proxy", "subnet 65", or "SN...
安全使用建议
This skill appears coherent for its stated purpose, but review a few points before installing: (1) Proxy operators and exit nodes can observe traffic — do not send sensitive data through third-party proxies. (2) Although the SKILL.md contains strict validation and SSRF mitigations, fetching user-specified URLs via decentralized proxies carries residual SSRF/privacy risk (DNS differences or proxy-side routing may expose internal endpoints). (3) Store your TPN_API_KEY securely; the skill will use it to call api.taoprivatenetwork.com and will not echo it. (4) If you plan to let the agent fetch URLs on your behalf, consider restricting allowed domains or requiring explicit confirmation for each external fetch. If you need higher assurance, ask the skill maintainer for an explicit SLA/privacy statement from the TPN provider and for independent security review of the proxy network.
功能分析
Type: OpenClaw Skill
Name: tpn-proxy
Version: 1.1.2
The skill is designed to provide decentralized SOCKS5 proxies and route web traffic through them. While this involves inherently risky capabilities like network access and command execution, the `SKILL.md` instructions and `references/security-assessment.md` explicitly detail robust security mitigations. These include mandatory input validation for all user-provided parameters, strict URL validation to prevent SSRF (rejecting internal IPs, unresolvable hostnames, shell metacharacters), explicit prohibitions against unsafe shell-based JSON parsing methods (favoring `jq` or `format=text`), and secure handling of the `TPN_API_KEY` (never echoed or logged). The instructions actively guide the AI agent to follow secure practices, rather than attempting prompt injection for malicious purposes. There is no evidence of intentional data exfiltration, persistence, or unauthorized control.
能力评估
Purpose & Capability
Name/description (TPN proxy) align with required binary (curl) and the single required environment variable (TPN_API_KEY). The skill only requests what is necessary to call the provider API and return proxy credentials.
Instruction Scope
SKILL.md instructs the agent to call the TPN API, generate proxies, and optionally fetch user-specified URLs through those proxies. The document includes mandatory input validation, explicit JSON/shell guidelines, and an allowlist-style SSRF mitigation scheme. Residual risk: fetching arbitrary URLs through third-party exit nodes can still leak request metadata to the proxy operator and, in uncommon DNS/hosting setups, could enable unintended access — the skill documents mitigations but these cannot eliminate all real-world edge cases.
Install Mechanism
Instruction-only skill with no install spec and no code files. This minimizes disk-write and supply-chain risk.
Credentials
Only a single API key (TPN_API_KEY) is required and declared as the primary credential. No unrelated secrets, signing keys, or extra cloud credentials are requested.
Persistence & Privilege
always:false (no forced presence). The skill does not request elevated runtime privileges or system config paths and does not attempt to modify other skills.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tpn-proxy - 安装完成后，直接呼叫该 Skill 的名称或使用
/tpn-proxy触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.2
tpn-proxy 1.1.2
- Updated documentation to clarify that agents should use built-in HTTP tools (e.g., WebFetch) when fetching URLs through the proxy, rather than constructing shell commands.
- Enhanced instructions on URL validation and proxy handling when performing web fetches.
- Expanded and reworded some security and process notes in SKILL.md for clarity.
- No functional/logic changes; update is documentation and guidance only.
v1.1.1
tpn-proxy 1.1.1 Changelog
- Updated documentation in `references/security-assessment.md` and `references/x402-examples.md`.
- No changes to skill functionality; this is a documentation update only.
v1.1.0
tpn-proxy 1.1.0
- Updated proxy credential handling: User-facing credentials now use the `socks5h://` scheme to ensure DNS privacy, while agent-side URL fetching uses `socks5://` for authoritative DNS checks.
- Clarified documentation on the distinction between `socks5h://` (user connections) and `socks5://` (agent-webfetch).
- Improved security section to highlight DNS privacy considerations and reinforce input validation requirements.
- Minor language improvements for clarity and accuracy in usage instructions.
v1.0.13
tpn-proxy v1.0.13
- Added a dedicated "Security Posture" section to clarify environment variable handling, secret management, and network behavior.
- Expanded and clarified URL validation requirements, with stricter rules for accepted hostnames—explicitly reject raw IPs and internal hostnames before any proxy fetches.
- Updated input validation and allowlist procedure descriptions, improving defense-in-depth for all proxy/fetch operations.
- Documentation improved for transparency and stronger guidance around safe JSON construction and shell command invocation.
- No functional API changes; changes are documentation and security policy clarifications only.
v1.0.12
tpn-proxy v1.0.12
- Updated the SKILL.md with stricter environment variable security requirements: do not echo, log, or display the actual API key value.
- Enhanced guidance for proxy URL input validation, including protections against metadata endpoints and internal hostnames.
- Clarified and strengthened instructions for validating hostnames, IP addresses, and handling of DNS resolution on the proxy side.
- Minor documentation improvements for clarity, especially around input validation and secure proxy usage.
v1.0.11
tpn-proxy 1.0.11
- Enforced strict input validation and security requirements for all user-provided values and shell commands.
- Added a mandatory validation section detailing rules for `geo`, `minutes`, `connection_type`, `format`, and URL parameters.
- Updated guidance to eliminate unsafe shell command construction and prevent shell injection vulnerabilities.
- Specified safe JSON body assembly for API requests and removed insecure shell-based JSON parsing fallbacks.
- Added references/security-assessment.md documenting the security review and implementation.
v1.0.10
tpn-proxy 1.0.10
- Simplified API key resolution: now uses just the `$TPN_API_KEY` environment variable (OpenClaw populates automatically), removing check of the workspace secrets file.
- Updated setup instructions to point users directly to the environment variable for authentication.
- Minor clarity improvements in procedure steps regarding API key lookup and initial setup.
v1.0.9
tpn-proxy 1.0.9
- Updated authentication instructions: x402 micropayments are now supported as an API key alternative if available.
- Clarified step 1 in the setup procedure, including direct reference to x402.org for decentralized payment.
- No logic or API changes; documentation improvement for user clarity.
v1.0.8
- Updated required environment and tool metadata (`openclaw` block) for clarity and stricter validation.
- Changed description of SOCKS5 credentials to clarify they are temporary and safe to display, not sensitive.
- Refined expected behavior and user guidance to reinforce immediate output of results and discourage instructional responses.
- Simplified and clarified language in various sections for improved readability and accuracy.
- No changes to core logic or API integration—the workflow remains the same.
v1.0.7
**Changelog for tpn-proxy v1.0.7:**
- Simplified and clarified the main SKILL.md instructions.
- Reworded guidance to emphasize that all proxy/API calls should be made by the skill, not deferred to the user.
- Consolidated content by removing references to internal documentation and API/payment flow files.
- Added two new example/reference files for API and x402 usage.
- Updated examples and wording for better readability and user focus.
v1.0.6
- Improved the skill description to clarify usage examples and invocation phrases.
- Updated documentation to specify availability of both commercial and residential exit nodes.
- Added specific example queries to guide user requests.
- Added an explicit "TO LLMS" heading reinforcing that this is an action skill, not for documentation responses.
- Minor edits and clarifications throughout for greater usability and accuracy.
v1.0.5
# tpn-proxy 1.0.5
- Updated SKILL.md with revised instructions, emphasizing step-by-step usage and response details.
- Clarified that SOCKS5 proxy credentials are not sensitive and must always be shown in full.
- Added a strict procedural flow for proxy generation and user interaction—proxy generation, credentials presentation, and fetching URLs now have well-defined steps.
- Expanded response examples for clarity, including new sample user queries and ideal responses.
- Streamlined environment variable/key resolution and format selection steps.
- Removed redundant documentation and condensed explanations for faster comprehension.
v1.0.4
**Strictly enforces action-oriented usage. Documentation is now only for situations where the user can't access the API key.**
- Added clear rule: always call the TPN API and fetch results for the user; never just show documentation or API usage unless the user asks how to do it themselves.
- Included step-by-step logic for selecting the API response format ("text" vs "json") and how to parse results based on available tools (`jq`, `python`, or shell).
- Clarified that documentation/instructions should not be returned to the user by default.
- Highlighted that account setup guidance is the only exception where showing instructions is permitted.
- Updated documentation to ensure user experience is always action-focused.
v1.0.3
tpn-proxy 1.0.3
- Documentation updated: SKILL.md rewritten and expanded for greater clarity.
- No code or behavior changes; update is documentation-only.
- Improved usage instructions, environment variable guidance, and step-by-step integration examples for curl, Node.js, and Python.
- Added clear x402 payment flow summary and referenced detailed documentation.
v1.0.2
**Changelog for tpn-proxy v1.0.2**
- Documents the required environment variable `TPN_API_KEY`, its secrets file location, and the variable resolution order.
- Updates skill metadata with explicit secrets handling details for `TPN_API_KEY`.
- Clarifies that `TPN_API_KEY` is only necessary for the centralized API, not when using the x402 flow.
- Updates example endpoints to use `https://ipv4.icanhazip.com` for IP checks in curl, Node.js, and Python examples.
v1.0.1
- Added documentation for alternate names and aliases (e.g. "TPN", "subnet 65", "SN65") for easier skill discovery and invocation.
- Explained where the TPN API key is stored (`~/.openclaw/workspace/.secrets/tpn.env`) and provided instructions to check this file before prompting users for their API key.
v1.0.0
tpn-proxy v1.0.0
- Initial release of the tpn-proxy skill for web requests via decentralized SOCKS5 proxies on the Tao Private Network (TPN).
- Supports both API key-based centralised authentication and decentralised x402 micropayment flows.
- Guides included for generating and using SOCKS5 proxies with curl, Node.js, and Python.
- Details exposed on proxy lease options, geo-targeting, connection types (residential/datacenter), and credit pricing.
- Provides instructions for setting up an account, acquiring credits, and exploring all supported API endpoints.
- Emphasizes DNS-leak protection by recommending socks5h for all proxy usage.
元数据
常见问题
TPN Proxy 是什么？
Make web requests through decentralized SOCKS5 proxies via the Tao Private Network (TPN). This skill is also known as "TPN", "TPN proxy", "subnet 65", or "SN... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 869 次。
如何安装 TPN Proxy？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tpn-proxy」即可一键安装，无需额外配置。
TPN Proxy 是免费的吗？
是的，TPN Proxy 完全免费（开源免费），可自由下载、安装和使用。
TPN Proxy 支持哪些平台？
TPN Proxy 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 TPN Proxy？
由 actuallymentor（@actuallymentor）开发并维护，当前版本 v1.1.2。
推荐 Skills