Vpn Rotate Skill

• Outcome: Review
• Latest audit: May 28, 2026, 4:04 AM
• Version:
  0.1.0

Overview

This skill openly rotates VPNs for scraping and rate-limit bypass, but it also installs persistent passwordless sudo rules and stores VPN credentials on disk, so it needs review before use.

Install only on a machine where you are comfortable granting persistent passwordless sudo for OpenVPN and process-kill commands. Use only for authorized traffic, protect or avoid the plaintext VPN credential file, remove the sudoers entry when done, and expect rotations or disconnects to disrupt other OpenVPN sessions on the host.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Rogue Agent: Self-Modification, Session Persistence

Findings (19)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 91% confidence
• Finding: The skill describes shell, file, and network-capable operations but does not declare permissions, which undermines transparency and safe review. In this context, the capability gap matters because the skill performs privileged VPN setup and network manipulation that users or platforms may not expect from undeclared permissions.

Context-Inappropriate Capability

Medium

• Confidence: 99% confidence
• Finding: The script persistently installs a sudoers rule granting passwordless execution of openvpn, killall, and kill. This exceeds one-time setup needs and creates a durable privilege-escalation pathway, especially because process-control commands can be abused to terminate arbitrary processes or support later privilege misuse without further user authentication.

Context-Inappropriate Capability

Medium

• Confidence: 98% confidence
• Finding: The disconnect path uses a broad 'sudo -n killall openvpn', which can terminate unrelated OpenVPN sessions running on the host, not just the one started by this tool. In shared systems or workstations with other VPN usage, this can disrupt connectivity, break other applications, and create unintended denial-of-service conditions.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The README instructs users to enable passwordless sudo for OpenVPN but does not warn that this weakens host security and expands the blast radius if the skill, its scripts, or dependent tooling are compromised. In this skill’s context, the risk is elevated because it is explicitly designed to evade rate limits and automate repeated VPN reconnections, making frequent privileged execution a core workflow rather than an exceptional setup step.

Missing User Warnings

High

• Confidence: 98% confidence
• Finding: The setup instructs users to create a passwordless sudoers rule for openvpn and killall without explaining the security consequences. This weakens local privilege boundaries and creates a reusable primitive for process control and privileged network changes, which becomes especially risky in a skill explicitly intended to automate evasion and repeated reconnection behavior.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The manual setup stores VPN credentials in a plaintext file, which increases the chance of credential disclosure through backups, local compromise, accidental sharing, or other tooling reading home-directory files. Although chmod 600 reduces exposure, it does not eliminate the risk of secrets at rest in cleartext.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill explicitly promotes rotating VPN servers to bypass rate limits and geo-restrictions, which is an evasion use case rather than a normal privacy or connectivity function. That context increases risk because the documented purpose is to defeat provider controls and access restrictions, exposing users to account, legal, and abuse-related consequences.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The instructions explicitly create a local plaintext credential file containing the Mullvad account number, which functions as both username and password. Even with chmod 600, plaintext secrets on disk are exposed to local compromise, backups, shell/user mistakes, and reuse by other tooling, and the file is presented without any warning about secret handling.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The instructions direct the user to store NordVPN service credentials in a local plaintext file under the home directory, which creates a clear secret-at-rest exposure risk if the workstation is compromised, backed up insecurely, or accessed by other local processes. In this skill’s context—automating VPN rotation for high-volume scraping and rate-limit evasion—those credentials are especially sensitive because compromise could enable unauthorized VPN use and hinder attribution.

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The instructions direct users to place OpenVPN credentials in a plaintext file on disk, and while `chmod 600` limits permissions, it does not change the fact that the secret remains unencrypted and may be exposed through backups, filesystem compromise, shell history mishandling, or accidental disclosure. In the context of a VPN rotation skill intended for high-volume scraping and rate-limit evasion, these credentials are especially sensitive because compromise could enable unauthorized VPN use and attribution evasion.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The script stores VPN credentials on disk in plaintext after prompting the user, but does not clearly warn that secrets will be written locally. Even with chmod 600, plaintext local storage increases exposure to credential theft from backups, local compromise, shell/user mistakes, or later misuse by other tooling.

Missing User Warnings

High

• Confidence: 99% confidence
• Finding: The script modifies /etc/sudoers.d to enable passwordless sudo without an explicit safety warning or opt-in confirmation. Silent persistence of elevated privileges is dangerous because users may not realize they have granted future unrestricted access to sensitive operations, and other local code executed as that user can then leverage those privileges.

Missing User Warnings

Medium

• Confidence: 80% confidence
• Finding: The code passes a plaintext credentials file to OpenVPN automatically, but provides no warning, permission checks, or validation of how that secret is stored. In a skill explicitly designed for high-volume scraping and rate-limit evasion, this increases the chance users will place long-lived VPN credentials in weakly protected locations, leading to credential exposure or misuse.

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The disconnect routine performs privileged process termination, including a killall fallback, without any explicit warning that it may affect other VPN sessions on the machine. Because the skill automates repeated connect/disconnect cycles, users may trigger disruptive system changes frequently and unexpectedly.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

This will:
- Check OpenVPN is installed
- Help you configure your VPN provider
- Set up passwordless sudo
- Test the connection

### 2. Manual Setup

• Confidence: 90% confidence
• Finding: sudo

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

### Connection fails

1. Check credentials are correct
2. Test manually: `sudo openvpn --config ~/.vpn/servers/server.ovpn --auth-user-pass ~/.vpn/creds.txt`
3. Check VPN provider account is active

### Still getting blocked

• Confidence: 80% confidence
• Finding: sudo

Session Persistence

Medium

• Category: Rogue Agent

Content

# Install OpenVPN
sudo apt install openvpn

# Create config directory
mkdir -p ~/.vpn/servers

# Download .ovpn files from your VPN provider

• Confidence: 82% confidence
• Finding: Create config directory mkdir -p ~/.vpn/servers # Download .ovpn files from your VPN provider # Put them in ~/.vpn/servers/ # Create credentials file echo "your_username" > ~/.vpn/creds.txt echo "yo

Chaining Abuse

High

• Category: Tool Misuse

Content

chmod 600 ~/.vpn/creds.txt

# Enable passwordless sudo for openvpn
echo "$USER ALL=(ALL) NOPASSWD: /usr/sbin/openvpn, /usr/bin/killall" | sudo tee /etc/sudoers.d/openvpn
```

## Usage

• Confidence: 97% confidence
• Finding: | sudo

Chaining Abuse

High

• Category: Tool Misuse

Content

Run the setup script or manually add sudoers entry:
```bash
echo "$USER ALL=(ALL) NOPASSWD: /usr/sbin/openvpn, /usr/bin/killall" | sudo tee /etc/sudoers.d/openvpn
```

### Connection fails

• Confidence: 95% confidence
• Finding: | sudo

VirusTotal

64/64 vendors flagged this skill as clean.