AdGuard Home Manager

Manage AdGuard Home network-wide DNS ad blocking. Query blocklist stats, add/remove custom DNS rules, check filtering status, and view top blocked domains fr...

Security Scan

The skill's requirements, scripts, and instructions are consistent with its stated purpose (managing a self‑hosted AdGuard Home instance) and do not request unrelated access.

Purpose & Capability

The name/description match the requested environment variables (ADGUARD_USERNAME, ADGUARD_PASSWORD, ADGUARD_BASE_URL) and required binaries (curl, jq). Those credentials are exactly what is needed to call the AdGuard Home HTTP API; nothing extraneous is requested.

Instruction Scope

SKILL.md and the included scripts only call endpoints under ADGUARD_BASE_URL and use Basic Auth; they query status/stats, manage filtering rules, and toggle DNS filtering as described. The instructions do not attempt to read unrelated files or environment variables, nor do they transmit data to third‑party endpoints beyond the provided base URL.

Install Mechanism

There is no install step (instruction-only with bundled scripts). No external downloads or archive extraction are performed by the skill itself. The only runtime dependencies are curl and jq, which are declared.

Credentials

The skill requires three env vars which are proportionate to its function. The primary secret (ADGUARD_PASSWORD) is appropriate. No unrelated credentials or broad system config paths are requested.

Persistence & Privilege

always is false and autonomous invocation is the platform default. The skill does not attempt to modify other skills or system‑wide settings and does not request persistent elevated privileges.

Assessment

This skill appears to do exactly what it says: manage a self‑hosted AdGuard Home via its HTTP API using the provided credentials. Before installing: (1) only provide ADGUARD_USERNAME/ADGUARD_PASSWORD for a trusted AdGuard server (use HTTPS for remote servers); (2) prefer creating a dedicated account with only the permissions the agent needs (note: adding/removing rules and toggling filtering require write/admin rights); (3) review the included scripts yourself (they attempt multiple AdGuard endpoints and may behave differently across AdGuard versions); (4) avoid using this skill with highly privileged credentials on untrusted networks and rotate the password if it is later shared or exposed. If you need stricter safety, run the scripts manually or use a read‑only account for monitoring actions and a separate admin account only when you explicitly approve changes.

AdGuard Home

Manage AdGuard Home — the network-wide DNS server that blocks ads, trackers, and malware for your entire network.

Setup

1. Install AdGuard Home on your VPS or home server
2. Create a user for the agent: Settings → AdGuard Home → Users → Add User
3. Get your base URL (e.g. http://192.168.1.1:3000 or https://your-vps.example.com)
4. Export env vars:

export ADGUARD_USERNAME=your_username
export ADGUARD_PASSWORD=your_password
export ADGUARD_BASE_URL=http://192.168.1.1:3000

Tools

status

Get overall AdGuard Home status — DNS status, filtering enabled, protection level.

adguard-home-status

stats

Get filtering statistics: total blocked, allowed, queries today, top blocked domains.

adguard-home-stats [period]   # period: hour, day, week, month, year (default: day)

blocked_domains

Get the most frequently blocked domains.

adguard-home-blocked-domains [limit]   # default: 20

add_rule

Add a custom DNS blocking rule.

adguard-home-add-rule "<domain or rule>"
# Examples:
#   adguard-home-add-rule "example.com"           # block single domain
#   adguard-home-add-rule "||example.com^"       # AdGuard blocking syntax
#   adguard-home-add-rule "@||example.com^"      # allowlist exception

remove_rule

Remove a custom DNS rule by content.

adguard-home-remove-rule "<rule>"

list_rules

List all custom DNS rewrite rules.

adguard-home-list-rules

query_log

Query the DNS query log — find what domains were resolved on the network.

adguard-home-query-log [domain_filter] [limit]
# Example: adguard-home-query-log "ads" 50

toggle_filtering

Enable or disable DNS filtering (ad blocking).

adguard-home-toggle-filtering true   # or false

Notes

• AdGuard Home API: https://github.com/AdguardTeam/AdGuardHome/wiki/Config#web-interface
• Authentication uses HTTP Basic Auth with username:password
• Rate limiting: avoid querying the query_log with very large limits
• DNS rewrite rules can create custom DNS responses (A, AAAA, CNAME records)