Buy Taoflow VPN

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only buying guide, but users should verify the payment site and protect any order tokens, recovery keys, or VPN configs.

Use this skill only when you intend to buy Taoflow VPN. Independently verify the official Taoflow domain, confirm all order and crypto payment details before paying, and do not share recovery keys, access tokens, or WireGuard configuration outside the setup task.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

A user could rely on the skill's claimed official URL without an independent registry-level verification point.

Why it was flagged

The registry metadata does not provide an independent source or homepage, while the skill directs users toward a specific purchase domain.

Skill content
Source: unknown; Homepage: none
Recommendation

Before paying, verify the Taoflow VPN domain through an independent trusted source.

What this means

The agent may help generate an order and payment address, so mistakes in plan, country, currency, or address could affect a purchase if the user proceeds.

Why it was flagged

API mode can create provider orders and present crypto payment details; this is purpose-aligned and includes a confirmation safeguard before payment-triggering actions.

Skill content
POST /orders ... Create order and return pay_amount/pay_address/order_id to user. Require explicit user confirmation before any external payment-trigger action.
Recommendation

Confirm the plan, country, currency, amount, and payment address on the official site before sending funds.

What this means

If these secrets are exposed, someone else may be able to view or recover the order or use the VPN configuration.

Why it was flagged

The API flow uses order access tokens, recovery keys, and WireGuard configuration data that can grant access to order details or VPN connectivity.

Skill content
GET /orders/{id} with Bearer access_token ... POST /orders/recover (with recovery_key) ... Fetch wg_config
Recommendation

Keep access tokens, recovery keys, and WireGuard configs private; mask them in chat unless disclosure is absolutely necessary.