homelab-network-readiness

homelab-network-readiness is a skill for Claude Code, Codex from gongyijie85/dsh-ecc. It costs 39 tokens per session (1,626 once invoked), scanned A, a copy of homelab-network-readiness, MIT.

A planning and review checklist for safely changing a home or small-lab network that uses VLANs, local DNS filtering, firewalls, and VPN access.

In plain words
What is it for?
Use it to inventory a network, assess risks, plan migrations, verify access to gateways and servers, and prepare rollback steps before making changes.
Why use it?
It helps identify lockout, connectivity, and exposure risks before changing router, DHCP, DNS, firewall, or VPN settings. It also structures the work into staged changes with checks and a way to undo them.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to inventory a network, assess risks, plan migrations, verify access to gateways and servers, and prepare rollback steps before making changes.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/gongyijie85/dsh-ecc/homelab-network-readiness
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add gongyijie85/dsh-ecc --skill homelab-network-readiness
Clone the repo
git clone --depth 1 https://github.com/gongyijie85/dsh-ecc

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for homelab-network-readiness

README.md
[![agentmods](https://agentmods.dev/badge/skills/gongyijie85/dsh-ecc/homelab-network-readiness/github.svg)](https://agentmods.dev/skills/gongyijie85/dsh-ecc/homelab-network-readiness)
Your own site
<a href="https://agentmods.dev/skills/gongyijie85/dsh-ecc/homelab-network-readiness"><img src="https://agentmods.dev/badge/skills/gongyijie85/dsh-ecc/homelab-network-readiness/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for homelab-network-readiness

Your own site · 80×15
<a href="https://agentmods.dev/skills/gongyijie85/dsh-ecc/homelab-network-readiness"><img src="https://agentmods.dev/badge/skills/gongyijie85/dsh-ecc/homelab-network-readiness.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 39 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,626 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin 91% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00039 $0.01626
Opus 5 $0.00019 $0.00813
Sonnet 5 $0.00008 $0.00325
Haiku 4.5 $0.00004 $0.00163

Measured 8d ago against content hash 056835b13ab0, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

homelab-network-readiness scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

91% identical to homelab-network-readiness — 28 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

skills/homelab-network-readiness/SKILL.md · 171 lines

How it starts

The opening of the file, as written. The whole thing — 171 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Homelab Network Readiness

Use this skill before changing a home or small-lab network that mixes VLANs, Pi-hole or another local DNS resolver, firewall rules, and remote VPN access.

This is a planning and review skill. Do not turn it into copy-paste router, firewall, or VPN configuration unless the target platform, current topology, rollback path, console access, and maintenance window are all known.

When to Use

  • Preparing to split a flat network into trusted, IoT, guest, server, or management VLANs.
  • Moving DHCP clients to Pi-hole, AdGuard Home, Unbound, or another local DNS resolver.
  • Adding WireGuard, Tailscale, ZeroTier, OpenVPN, or router-native VPN access.
  • Reviewing whether a homelab change can lock the operator out of the gateway, switch, access point, DNS server, or VPN server.
  • Turning an informal home-network idea into a staged migration plan with validation evidence.

Safety Rules

  • Keep the first answer read-only: inventory, risks, staged plan, validation, and rollback.
  • Do not expose gateway admin panels, DNS resolvers, SSH, NAS consoles, or VPN management UIs directly to the public internet.
  • Do not provide firewall, NAT, VLAN, DHCP, or VPN commands without a confirmed platform and a rollback procedure.
  • Require out-of-band or same-room console access before changing management VLANs, trunk ports, firewall default policies, or DHCP/DNS settings.
  • Keep a working path back to the internet before pointing the whole network at a new DNS resolver or VPN route.
  • Treat IoT, guest, camera, and lab-server networks as different trust zones until the operator explicitly chooses otherwise.

Required Inventory

Collect this before giving implementation steps:

Area Questions
Internet edge What is the modem or ONT? Is the ISP router bridged or still routing?
Gateway What routes, firewalls, handles DHCP, and terminates VPNs?
Switching Which switch ports are uplinks, access ports, trunks, or unmanaged?
Wi-Fi Which SSIDs map to which networks, and are APs wired or mesh?
Addressing What subnets exist today, and which ranges conflict with VPN sites?
DNS/DHCP Which service currently hands out leases and resolver addresses?
Management How will the operator reach the gateway, switch, and AP after changes?
Recovery What can be reverted locally if DNS, DHCP, VLANs, or VPN routes break?

Read the full file on GitHub · 171 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 171 lines · 39 tokens per session scan A 056835b13ab0

Subscribe to this mod's changes

homelab-network-readiness is a skill published in the GitHub repository gongyijie85/dsh-ecc (7 stars, last pushed yesterday), licensed MIT. It adds 39 tokens to every session and 1,626 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. It is 91% identical to homelab-network-readiness, differing in 28 lines, and is treated as a copy.

Related

Other skills, from other repositories

manage-taskboard

Manage work in the native DeepSeek Harness Taskboard with exact task ids and optimistic versions. Use when an Agent must inspect project work, claim an eligible todo, record progress or blockers, verify an implementation, submit it for human review, or release its own claim; also use when a human asks how to accept…

shengsheng90/DSH-taskboard · 88 tokens

dsh-web-pet-developer

Create a pet for the dsh-pet plugin and integrate it into the dsh web GUI — author a v2 pet.json manifest plus an 8-column x 9-row atlas per the Codex/hatch-pet contract (live2d pets, voice packs and status decorations included), drop it into the pet-center user directory or contribute it as a built-in asset under…

zhu1090093659/dsh-web · 162 tokens

dsh-plugin-guide

Use when developing, reviewing, packaging, debugging, or answering questions about DeepSeek Harness (DSH) plugins — the plugin-based agent harness on vendored Cordis. Applies the official plugin-development constraints (plugin contract, cordis.yml layers, services/events/effects, tool DSL, bundles/profiles) backed by…

PerryLink/dsh-plugin-guide · 76 tokens

investor-distiller

An analysis tool for studying investment bloggers on WeChat, a Chinese messaging and publishing platform. It collects their articles and builds a structured profile of their trading methods, market views, writing style, topics and audience interaction.

redfox-data/redfox-community-dsh · 113 tokens

playlet-douyin-feed

A tool that tracks popular short dramas on Douyin, a Chinese short-video platform, and creates a daily HTML report with covers, engagement data, links, topic groups, and writing observations.

redfox-data/redfox-community-dsh · 264 tokens

bilibili-search-download

A tool for searching Bilibili, a Chinese video-sharing site, by keyword and collecting download links for matching videos. It can sort and filter results and return video, audio and cover-image resources.

redfox-data/redfox-community-dsh · 112 tokens