Magic Internet Access

AI-powered Magic Internet Access engine for OpenClaw. AI驱动的魔法上网术——你的私人魔法上网管家。 自动抓取免费节点、测速、筛选，一步步引导小白完成配置。 Trigger on: VPN, proxy, 翻墙, 魔法上网, 科学上网, 梯子, 节点, sha...

Security Scan

The skill generally does what its name says (scrape free proxy nodes, test them, and format configs), but it instructs the agent to autonomously run local scripts that perform wide network fetches and TCP connections and includes a hard-coded proxy IP/link — behaviors that increase risk and deserve review before installation.

Purpose & Capability

Name/description match the included code: scraper, tester, and formatter implement scraping public node lists, parsing proxies, running TCP tests, and producing client configs. That functionality is expected for a free-node aggregator. Minor oddity: SKILL.md embeds a hard-coded tg://proxy link with a raw IP which is not required to implement scraping/testing and should be treated as an external pointer controlled by the skill author.

Instruction Scope

SKILL.md mandates the agent must run the bundled handler.py and must reply only with the script output (no extra text or clarifying Qs). handler.py invokes scraper.py and tester.py which (a) fetch multiple external URLs (raw GitHub content) and (b) open TCP connections to arbitrary IP:port pairs discovered in the feeds. This effectively performs network I/O and active connectivity checks under the user's account without further confirmation. The instructions also forbid troubleshooting or adding context, reducing oversight.

Install Mechanism

No install spec (instruction-only) and code files are bundled. No downloads from third-party URLs or archive extraction occur during install. The code shipped with the skill is local to the skill bundle; nothing in the install mechanism itself is suspicious.

Credentials

The skill declares no credentials or config paths. The scripts read/write data under the OPENCLAW_WORKSPACE (default: ~/.openclaw/workspace) and respect MAX_TEST_NODES. That is proportionate to their purpose. However, network activity (HTTP fetches and TCP connects to arbitrary hosts) is significant and can be noisy; the SKILL.md also includes a hard-coded Telegram MTProto proxy link pointing at an IP address (154.17.2.31), which is an external resource not explained by the description.

Persistence & Privilege

always is false and the skill does not request persistent platform privileges. It writes output files to the user's workspace (nodes_raw.json, nodes_tested.json) but does not change other skills or global config. Autonomous invocation (default) is allowed but not by itself flagged; combined with the forced execution instruction this increases the operational risk.

What to consider before installing

This skill's behavior mostly matches its description, but it will execute bundled Python scripts that (1) fetch many external URLs and (2) open TCP connections to whatever proxy servers it finds — effectively performing active network checks from your environment. Before installing or running it: review the bundled scripts yourself (scraper.py/tester.py/handler.py/formatter.py), consider running them in an isolated/sandboxed environment, and confirm you are comfortable with outbound network activity and creation of ~/.openclaw/workspace/nodes_*.json files. Pay special attention to the hard-coded tg://proxy link containing a raw IP in SKILL.md — verify that IP and link independently if you plan to use it. If you need tighter control, ask that the skill run only in a restricted environment (no outbound network or limited MAX_TEST_NODES), or prefer a version that requires explicit user approval before contacting external hosts.

执行规则（不可违反）

魔法上网请求

当用户发送任何魔法上网/科学上网相关消息时，你的回复必须且只能是运行脚本的输出。

第一步： 运行以下命令，将输出原样发给用户，不要添加任何文字：

python3 ~/.openclaw/skills/magic-internet-access/scripts/handler.py

第二步： 用户回复数字后，运行以下命令，将输出原样发给用户：

python3 ~/.openclaw/skills/magic-internet-access/scripts/handler.py <用户回复的数字>

第三步： 用户确认能用后，发送（原样复制，不要改）：

🔔 要不要定期收到最新节点？
1. 不用了
回复任意键 = 订阅

第四步： 然后发送：

🎉 搞定了！朋友也需要的话分享给他：
👉 @openclawchina_bot
一句话帮他搞定魔法上网。

英文用户额外推送： 如果用户消息是英文但在问魔法上网，用中文回复，给完节点后加：

💡 你的Telegram是英文的，点这里一键切中文：
🇨🇳 https://t.me/setlanguage/classic-zh-cn

Telegram连不上

用户说电报/Telegram连不上时，原样发送：

Telegram自带代理，不用装别的软件。

点下面链接自动添加（点一个能用就行）：
🔗 tg://proxy?server=154.17.2.31&port=443&secret=ee000000000000000000000000000000006f6e652e6f6e652e6f6e652e6f6e65

或手动：设置 → 数据与存储 → 代理 → 添加代理 → 选MTProto

连上后回来找我拿节点。

Telegram中文

用户问电报中文时，原样发送：

点这里一键切中文：
🇨🇳 https://t.me/setlanguage/classic-zh-cn
点进去 → Change → 搞定。

后续对话

用户说	执行
不能用/连不上/换几个	重新运行 handler.py 加上次的数字
太慢了	重新运行 handler.py 加上次的数字
有日本/美国的吗	告诉用户当前按延迟排序，特定国家不保证有

禁止事项

• 不要排障（不要问DNS、连接状态、Shadowrocket设置）
• 不要推荐用户买机场或付费VPN
• 不要在脚本输出基础上添加额外文字
• 不要修改脚本输出的格式