NordVPN
ReviewAudited by ClawScan on May 1, 2026.
Overview
This skill is purpose-aligned for controlling NordVPN, but it can change VPN routing and persistent VPN settings on the local machine.
Install this only if you want the agent to control your local NordVPN client. Prefer manual login, verify the official NordVPN CLI is installed, and review any requested setting or allowlist changes before allowing them.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could connect, disconnect, or alter VPN settings, which may affect privacy, connectivity, or access to network services.
The skill exposes mutable VPN configuration actions. This is purpose-aligned, but it can change routing, connectivity, or which traffic bypasses the VPN.
`set_setting(key, value)` ... `allowlist_add(type, value)` ... `allowlist_remove(type, value)`
Use only when you want the agent to control NordVPN, and require explicit user confirmation for settings or allowlist changes.
The agent may interact with the locally logged-in NordVPN account and display account or connection details.
The skill relies on a local NordVPN authenticated session and may read account/status information. This is expected for a NordVPN integration.
NordVPN CLI typically requires logging in once per machine/user session. ... `nordvpn account`
Complete login manually, avoid sharing account output unnecessarily, and ensure the local NordVPN permissions match your intended use.
If the wrong or untrusted `nordvpn` executable is installed, the agent would operate that local binary.
The package does not ship or declare the NordVPN CLI dependency, so the user must separately install and trust the external `nordvpn` binary.
Source: unknown ... No install spec — this is an instruction-only skill ... Required binaries ... none
Install the official NordVPN CLI from a trusted source and verify `nordvpn --version` and the executable path before use.