Encrypted P2P TCP tunneling for remote network access — a self-hosted VPN / ngrok / Tailscale alternative built on the Tox protocol (libsodium). No API keys, no accounts, no central servers, no port-forwarding. Solves NAT traversal, carrier-grade NAT, double NAT, intranet penetration (内网穿透), and remote machine access without router or firewall changes. Tunnels SSH, RDP/VNC desktops, database connections (PostgreSQL/MySQL/Redis/MongoDB), homelab/NAS access (Synology, TrueNAS), local dev servers, and arbitrary TCP p…
These states come from the source or distribution context. None of the entries below are SkillVetAI compatibility test results.
These checks parse the fixed package against dated platform rules. They do not execute the Skill or verify task behavior.
.claude/skills/tox-tunnel-opsSKILL.mdRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
.agents/skills/tox-tunnel-opsSKILL.mdRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
skills/tox-tunnel-opsSKILL.mdRuntime, accounts, dependencies, permissions, network behavior and task quality remain untested.
This command is recorded from the source ecosystem and resolves the registry's latest release. The fixed release shown on this page should be inspected before adoption.
clawhub install @agentx-icu/tox-tunnel-opsclawhub inspect @agentx-icu/tox-tunnel-ops --version 0.4.14This automated, non-executing scan is bound to this release hash. It is not a safety certification and may contain false positives or false negatives.
curl … | sudo sh~/.ssh/configcurl -fsSL -o /tmp/install.sh https://raw.githubusercontent.com/agentx-icu/tox-tcp-tunnel/v0.4.12/scripts/install.shThis is registry-supplied evidence for the recorded release, not an independent SkillVetAI scan. Check the canonical source for the full report, scanner versions, scope, and current moderation state.
The catalog stores hashes and an inventory summary for change detection. It does not republish the package contents.
sha256:642f39c3690f87ed18e85a8de736ce5be5ffd167a0ff1129c7018c93f59ad8faexamples/db-migration.mdexamples/db-temp-access.mdexamples/dev-expose.mdexamples/local-loopback-test.mdexamples/nas-expose.mdexamples/prometheus-monitoring.mdexamples/rdp-remote.mdexamples/socks5-browser-proxy.mdexamples/ssh-remote.mdexamples/temp-maintenance.mdexamples/web-forward.mdreferences/diagnose.mdreferences/execute.mdscripts/diagnose.shscripts/verify.shskill-card.mdSKILL.mdtemplates/client.tpl.yamltemplates/rules.tpl.yamltemplates/server.tpl.yamlTracks toxtunnel v0.4.13, and fixes 25 findings from an independent review of this skill. Three of those would have made an agent act wrongly. Static forwards bind 0.0.0.0, but the skill presented local_port as loopback-only, so following the SSH or database examples silently exposed the service to the LAN - now every generated forward carries local_address: 127.0.0.1 on v0.4.13+, with the firewall/SOCKS5 path for older daemons. verify.sh could exit 0 after verification failed, while the workflow treats it as the final check; it now has a three-state exit (proven / failed / NOT PROVEN) and the probes that only prove a local accept say so instead of claiming end-to-end success. And Revoke immediately routed to hot reload, which does not close live tunnels - that is now split into blocking new sessions versus terminating current access. v0.4.13 product changes reflected here: forwards tak…
Both fixed releases were scanned under the current scanner and policy, so finding, permission and dependency changes are available.
These older immutable releases were observed by prior successful syncs. They remain recorded when a newer release becomes current.
sha256:23fda2d9eb8ee1b2ba9226587f89c03143b816b7b2ac47d36e7c36a4a2bcd1a3