Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/ogrodev/fsociety/network-anonymitynpx skills add ogrodev/fsociety --skill network-anonymitygit clone --depth 1 https://github.com/ogrodev/fsocietyWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ogrodev/fsociety/network-anonymity)<a href="https://agentmods.dev/skills/ogrodev/fsociety/network-anonymity"><img src="https://agentmods.dev/badge/skills/ogrodev/fsociety/network-anonymity.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00247 | $0.01972 |
| Opus 5 | $0.00123 | $0.00986 |
| Sonnet 5 | $0.00049 | $0.00394 |
| Haiku 4.5 | $0.00025 | $0.00197 |
Grade A, and why
network-anonymity scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
echo "Public IP: $(curl -s --max-time 5 https://api.ipify.org)" How it starts
The opening of the file, as written. The whole thing — 152 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Network Anonymity
Multi-layered network anonymity for red team operations -- proxy chains, VPN tunnels, Tor routing, traffic obfuscation, MAC/fingerprint hardening, DNS privacy, and comprehensive leak prevention. Every technique maps to trenton's four opsec profiles so operators can scale anonymity to their threat model.
Opsec Profile Integration
Each opsec profile prescribes a different anonymity posture. Read the relevant reference files for implementation details at each level.
| Profile | Network Layers | DNS | MAC/Fingerprint | Leak Testing | Reference Priority |
|---|---|---|---|---|---|
| loud | Direct connection | System default | No changes | None | -- |
| normal | Single VPN or SOCKS5 proxy | VPN-pushed DNS | Optional MAC rotation | Basic IP check | vpn-killswitch.md |
| stealth | VPN + Tor chain, killswitch active | Encrypted DNS (DoH/DoT) through tunnel | MAC randomized per session | Full leak suite every 30min | All references |
| paranoid | Multi-hop VPN + Tor + proxy, killswitch + IPv6 disabled | DNS over Tor only | MAC + hostname + timezone + OS fingerprint hardened | Continuous monitoring | All references |
Set the active profile before configuring anonymity layers:
node "${CLAUDE_PLUGIN_ROOT}/scripts/opsec-profile.js" set <profile>
node "${CLAUDE_PLUGIN_ROOT}/scripts/opsec-profile.js" show
Reference Files
Read these based on the task at hand. Each file is self-contained with actionable commands and configurations.
| Reference | When to Read | Contents |
|---|---|---|
references/proxy-chain-setup.md |
Setting up proxy chains, Tor integration, multi-hop architectures, SOCKS5 routing, identity rotation | Proxychains4 configuration, Tor circuit control, multi-hop designs per opsec profile, operational proxy patterns |
references/vpn-killswitch.md |
VPN setup, killswitch configuration, leak prevention, IPv6 hardening | WireGuard/OpenVPN killswitch (iptables/nftables/ufw), IPv6 disable, WebRTC mitigation, comprehensive leak testing |
references/dns-privacy.md |
DNS leak prevention, encrypted DNS, DNS over Tor | DoH, DoT, DNSCrypt, DNS over Tor, systemd-resolved lockdown, resolv.conf immutability |
references/traffic-obfuscation.md |
Hiding traffic patterns, tunneling through restrictive networks, evading DPI | SSH tunnels, stunnel/TLS wrapping, domain fronting, protocol obfuscation, traffic shaping |
references/mac-and-fingerprint.md |
MAC spoofing, hostname changes, OS fingerprint reduction, network metadata cleanup | macchanger workflows, hostname/timezone hardening, TCP/IP stack tuning, passive OS fingerprint evasion |
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 152 lines · 247 tokens per session scan A 931a52337bae
network-anonymity is a skill published in the GitHub repository ogrodev/fsociety (20 stars, last pushed 5mo ago), licensed MIT. It adds 247 tokens to every session and 1,972 once invoked, about $0.0012 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
mks
MKS (Metasploit-Kali Server) tool preference guide. Mount in Phase 0/1 alongside the primary skill. Provides URL resolution, REST endpoint patterns, response parsing, error handling, and fallback rules for all MKS-backed Kali tools.
pentest
Penetration testing orchestrator that coordinates specialized attack agents. Provides attack indexes, methodology frameworks, and documentation. Execution delegated to specialized agents (SQL Injection, XSS, SSRF, etc.). Use for engagement planning and attack coordination.
authenticating
Authentication testing skill - automates signup, login, 2FA bypass, CAPTCHA solving, and bot detection evasion using Playwright MCP. Tests authentication security controls. Includes behavioral biometrics simulation, OTP handling, and automated account creation for security assessments.
common-appsec-patterns
Application security testing coordinator for common vulnerability patterns including XSS, injection flaws, and client-side security issues. Orchestrates specialized testing agents to identify and validate common application security weaknesses.
web-application-mapping
Comprehensive web application reconnaissance and mapping coordinator that orchestrates passive browsing, active endpoint discovery, attack surface analysis, and headless browser automation for complete application coverage.
cve-testing
CVE vulnerability testing coordinator that identifies technology stacks, researches known vulnerabilities, and tests applications for exploitable CVEs using public exploits and proof-of-concept code.