Vpn Rotate Skill

Bypass API rate limits by rotating VPN servers. Works with any OpenVPN-compatible VPN (ProtonVPN, NordVPN, Mullvad, etc.). Automatically rotates to new server every N requests for fresh IPs. Use for high-volume scraping, government APIs, geo-restricted data.

This skill is coherent with its stated purpose (rotating OpenVPN configs) but asks you to make security-sensitive system changes. Before installing or running it, consider the following: - Review the code yourself (you have the files) and confirm there are no remote endpoints or hidden behaviors beyond those documented. The included code is local and readable. - Do NOT blindly add the sudoers entry: granting NOPASSWD for openvpn and especially for kill/killall gives root-level capabilities that could be abused if an attacker can control the OpenVPN configs or the openvpn binary. If you need passwordless operation, prefer a tightly-scoped wrapper script with a fixed PID file or use sudoers argument restrictions, or run the skill in an isolated environment. - Store credentials securely: the skill writes username/password to ~/.vpn/creds.txt. If you must use a creds file, ensure strict permissions (chmod 600) and prefer OS credential stores or ephemeral credentials where possible. - Run in isolation: consider running this code inside a disposable VM, container, or dedicated machine — do not run on multi-user or sensitive hosts. - Consider alternatives: provider-approved APIs, paid proxy/rotating-IP services, or sanctioned rate-limit strategies may be safer and reduce legal/TOS risk. - If you proceed, limit the sudoers entry to the minimum required and audit it (review /etc/sudoers.d/vpn-rotate). Remove the sudoers entry and creds when you no longer need the skill. If you want, I can: (1) show specifically where the sudoers line is added and suggest a safer sudoers line or wrapper script; (2) highlight the exact places credentials are written/read so you can modify them to use a secure store; or (3) suggest how to run the skill inside a container with minimal privileges.

Type: OpenClaw Skill Name: vpn-rotate-skill Version: 0.1.0 The skill is classified as suspicious due to the `setup.sh` script modifying `/etc/sudoers.d/` to grant passwordless `sudo` access for `openvpn`, `killall`, and `kill` commands. While intended for VPN process management, the `NOPASSWD` permission for `killall` and `kill` is a broad privilege escalation that allows termination of any process on the system without a password, posing a significant security risk. Additionally, VPN credentials are stored in `~/.vpn/creds.txt` on disk, though with restrictive permissions.