Tailscale Network Orchestrator

Manage and monitor your Tailscale network and devices using CLI commands to check status and list connected devices securely.

Security Scan

The skill appears to do what it says — it runs the local Tailscale CLI and formats the output — but there are small metadata and code-quality issues you should review before installing.

Purpose & Capability

The SKILL.md and README state the skill relies on the local 'tailscale' CLI and the included Python code calls that CLI. However, the registry metadata lists no required binaries; the skill should declare 'tailscale' as a required binary. Otherwise the requested capabilities match the stated purpose.

Instruction Scope

The runtime instructions are narrowly scoped: run 'python3 main.py status' or '... devices', which invoke the local 'tailscale status --json' command and parse the output. The code does not reference external endpoints or additional environment variables. One practical issue: main.py contains quoting problems in the f-strings that will cause a syntax error and make the skill nonfunctional until fixed — this is a quality bug, not an indication of malicious behavior.

Install Mechanism

There is no install specification (instruction-only with a code file included). That's low-risk from an install perspective because nothing is downloaded at install time; the skill merely expects the host to have the Tailscale CLI already installed.

Credentials

The skill requests no environment variables or credentials. This is proportional: interacting with the local tailscale CLI does not require API keys in the skill. Note that the CLI output contains network and device information — access to that output is the point of the skill and is expected.

Persistence & Privilege

The skill does not request persistent or elevated platform privileges (always:false) and does not modify other skill or system configurations. Autonomous invocation is allowed (default) which is normal; this skill's scope is small so the privilege model is appropriate.

Assessment

This skill is coherent with its stated purpose (it runs the local 'tailscale' CLI and formats the JSON output). Before installing: (1) ensure the host has the official Tailscale CLI installed and that the ClawBot process runs under a user with appropriate permissions; (2) be aware that the skill will read and display local Tailscale status and device information — don't install it in an environment where exposing that info is a concern; (3) review/fix the provided main.py syntax errors (misnested quotes in f-strings) before use, or run the commands yourself to confirm expected behavior; (4) update the skill metadata to declare the 'tailscale' CLI as a required binary so the dependency is clear. If you need higher assurance, run the included Python locally first and inspect outputs and behavior in a safe/test environment.

SKILL.md

name: Tailscale Network Orchestrator slug: tailscale-orchestrator summary: Manage your Tailscale network and devices directly from ClawBot. description: |- This skill provides commands to check Tailscale status, list connected devices, and perform basic network operations. It leverages the tailscale command-line interface (CLI) installed on the host machine where ClawBot is running. This allows for secure and direct management of your Tailscale network without exposing sensitive API keys directly to the skill. author: Manus AI version: 0.1.0 trigger:

• "manage tailscale"
• "tailscale status"
• "list tailscale devices" commands:
• name: status description: Displays the current Tailscale status, including connection state and active nodes. usage: "status" script: python3 main.py status
• name: devices description: Lists all connected devices in your Tailscale network with their status and IP addresses. usage: "devices" script: python3 main.py devices