Tailscale Network Orchestrator

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a narrow, read-only Tailscale status helper, but it does use the local Tailscale CLI/profile and should be installed only where that access is intended.

This looks safe for its stated read-only purpose. Install it only where ClawBot is allowed to query your local Tailscale CLI, because device names, Tailscale IPs, and online status may appear in the agent conversation.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can run local Tailscale status commands and show information about the host and tailnet peers.

Why it was flagged

The skill executes a local CLI command. The arguments are fixed by the code to status-related calls, so this is expected for the stated purpose but still worth noticing.

Skill content
full_command = ["tailscale"] + command_args
result = subprocess.run(full_command, capture_output=True, text=True, check=True)
Recommendation

Install only on a machine where the ClawBot process is allowed to query Tailscale status, and keep the tailscale CLI installation trusted and up to date.

What this means

The skill may reveal device names, Tailscale IP addresses, and online status visible to the configured Tailscale identity.

Why it was flagged

A configured Tailscale CLI uses the local machine/user's Tailscale access. That is coherent with the skill's purpose, but it means the skill depends on local account/session privileges.

Skill content
This skill requires the Tailscale CLI to be installed and configured on the system where your ClawBot instance is running.
Recommendation

Use a least-privileged environment where the local Tailscale profile exposes only the tailnet information you are comfortable sharing with the agent.

What this means

Users may install the skill without realizing it will fail unless the local tailscale CLI is already installed and configured.

Why it was flagged

The registry metadata does not declare the tailscale binary even though the README and code rely on it. This is an install/dependency documentation gap, not evidence of hidden behavior.

Skill content
Required binaries (all must exist): none; Required binaries (at least one): none
Recommendation

Before installing, confirm the tailscale CLI is present, trusted, and configured intentionally for this ClawBot environment.