Clash Verge Skill
v1.0.0Control Clash Verge Rev via mihomo API. Query proxy status, switch nodes, test delays, manage connections, DNS, and more. Use when user mentions Clash, proxy...
⭐ 0· 112·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description promise (control Clash Verge/mihomo: query status, switch nodes, test delays, manage connections/DNS, restart/upgrade) aligns with the provided Python CLI which calls the local mihomo controller API via a Unix socket or localhost HTTP. Nothing in the code requests unrelated cloud credentials or unrelated system access. Note: SKILL.md and the script disagree on the default HTTP port (SKILL.md mentions 9097 in one place; the script uses 9090) and the README claims a default API token '#OpenClaw' while the script defaults to an empty secret—these are documentation inconsistencies, not functionality mismatches.
Instruction Scope
SKILL.md instructs invoking the bundled Python script; the script only connects to a local Unix socket or localhost HTTP endpoint and issues API requests defined by mihomo. It does not instruct reading arbitrary user files or exporting data to third-party endpoints. Delay tests are done via the controller (which may itself perform outbound requests), and the CLI can issue operations that alter local networking state (e.g., select node, close connections, restart, upgrade DB), which is expected for this tool.
Install Mechanism
There is no install spec; this is an instruction-only skill with a bundled script. No external downloads or package installs are performed by the skill itself, minimizing install-time risk.
Credentials
The registry metadata lists no required env vars or secrets. The script accepts optional env vars (CLASH_SOCK, CLASH_API, CLASH_SECRET) to override connection parameters—reasonable for a local controller client. However, SKILL.md's documentation references a default API token value ('#OpenClaw') that the script does not actually apply; treat that documented token string as a documentation artifact and not an actual credential requirement.
Persistence & Privilege
The skill does not request persistent/forced inclusion (always:false) and does not modify other skills or system-wide agent settings. It operates only when invoked and interacts with the local mihomo controller API; it does include commands that change local state (restart, close connections), which is expected for this utility.
Assessment
This skill appears to be what it says: a local controller client for Clash Verge/mihomo. Before installing, verify you actually run mihomo (and on which socket/port) and confirm the Unix socket path or localhost port in your environment. Do not set CLASH_SECRET to any sensitive shared token unless you trust the local controller; the SKILL.md mentions an API token string (#OpenClaw) but the script does not use that as a default—treat that as a documentation inconsistency. Be aware the script can perform disruptive local actions (switch nodes, close connections, restart the service, update GeoIP/GeoSite), so only give it to agents/users you trust. If you want stronger guarantees, review the included script yourself or run it manually once to confirm behavior before allowing autonomous agent invocation.Like a lobster shell, security has layers — review code before you run it.
latestvk976j60b7j41ad09nfjgzq97ns83ar01
License
MIT-0
Free to use, modify, and redistribute. No attribution required.