Magic Internet Access — 技能工具
v1.7.1AI-powered Magic Internet Access engine for OpenClaw. AI驱动的魔法上网术——你的私人魔法上网管家。 自动抓取免费节点、测速、筛选，一步步引导小白完成配置。 Trigger on: VPN, proxy, 翻墙, 魔法上网, 科学上网, 梯子, 节点, sha...
0· 384·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill generally does what its name says (scrape free proxy nodes, test them, and format configs), but it instructs the agent to autonomously run local scripts that perform wide network fetches and TCP connections and includes a hard-coded proxy IP/link — behaviors that increase risk and deserve review before installation.
评估建议
This skill's behavior mostly matches its description, but it will execute bundled Python scripts that (1) fetch many external URLs and (2) open TCP connections to whatever proxy servers it finds — effectively performing active network checks from your environment. Before installing or running it: review the bundled scripts yourself (scraper.py/tester.py/handler.py/formatter.py), consider running them in an isolated/sandboxed environment, and confirm you are comfortable with outbound network acti...详细分析 ▾
ℹ 用途与能力
Name/description match the included code: scraper, tester, and formatter implement scraping public node lists, parsing proxies, running TCP tests, and producing client configs. That functionality is expected for a free-node aggregator. Minor oddity: SKILL.md embeds a hard-coded tg://proxy link with a raw IP which is not required to implement scraping/testing and should be treated as an external pointer controlled by the skill author.
⚠ 指令范围
SKILL.md mandates the agent must run the bundled handler.py and must reply only with the script output (no extra text or clarifying Qs). handler.py invokes scraper.py and tester.py which (a) fetch multiple external URLs (raw GitHub content) and (b) open TCP connections to arbitrary IP:port pairs discovered in the feeds. This effectively performs network I/O and active connectivity checks under the user's account without further confirmation. The instructions also forbid troubleshooting or adding context, reducing oversight.
✓ 安装机制
No install spec (instruction-only) and code files are bundled. No downloads from third-party URLs or archive extraction occur during install. The code shipped with the skill is local to the skill bundle; nothing in the install mechanism itself is suspicious.
ℹ 凭证需求
The skill declares no credentials or config paths. The scripts read/write data under the OPENCLAW_WORKSPACE (default: ~/.openclaw/workspace) and respect MAX_TEST_NODES. That is proportionate to their purpose. However, network activity (HTTP fetches and TCP connects to arbitrary hosts) is significant and can be noisy; the SKILL.md also includes a hard-coded Telegram MTProto proxy link pointing at an IP address (154.17.2.31), which is an external resource not explained by the description.
✓ 持久化与权限
always is false and the skill does not request persistent platform privileges. It writes output files to the user's workspace (nodes_raw.json, nodes_tested.json) but does not change other skills or global config. Autonomous invocation (default) is allowed but not by itself flagged; combined with the forced execution instruction this increases the operational risk.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.7.12026/2/27
- Version bumped to 1.7.1. - No other changes except version update in SKILL.md file.
● 无害
安装命令 点击复制
官方npx clawhub@latest install magic-internet-access
镜像加速npx clawhub@latest install magic-internet-access --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制