slv-wireguard

slv-wireguard is a skill for Claude Code, Codex from ValidatorsDAO/slv. It costs 0 tokens per session (2,590 once invoked), scanned B, original, Apache-2.0.

A guided setup for creating a WireGuard VPN, which is a private encrypted connection to a server, on an SLV host and pairing it with a phone or laptop.

In plain words
What is it for?
Use it to set up WireGuard, exchange public keys, and connect a phone or laptop to the SLV host. It covers choosing the server and refers firewall setup to a separate skill.
Why use it?
It helps a non-engineer connect securely to the server without exposing its private keys. It also explains why a separate VPN server can make recovery easier if the main production server stops working.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/validatorsdao/slv/slv-wireguard
Any agent
npx skills add ValidatorsDAO/slv --skill slv-wireguard
Clone the repo
git clone --depth 1 https://github.com/ValidatorsDAO/slv

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for slv-wireguard

README.md
[![agentmods](https://agentmods.dev/badge/skills/validatorsdao/slv/slv-wireguard.svg)](https://agentmods.dev/skills/validatorsdao/slv/slv-wireguard)
Your own site
<a href="https://agentmods.dev/skills/validatorsdao/slv/slv-wireguard"><img src="https://agentmods.dev/badge/skills/validatorsdao/slv/slv-wireguard.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,590 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.02590
Opus 5 $0.00000 $0.01295
Sonnet 5 $0.00000 $0.00518
Haiku 4.5 $0.00000 $0.00259

Measured 4d ago against content hash a86c8ffae98a, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade B, and why

slv-wireguard scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

blocks and run `sudo wg syncconf wg0 <(wg-quick strip wg0)`.
oss-skills/slv-wireguard/SKILL.md · 226 lines

How it starts

The opening of the file, as written. The whole thing — 226 lines — stays where its author put it; the contents beside it link to each section on GitHub.

SLV WireGuard Skill

Stand up a WireGuard VPN on the SLV host and pair it with a non-engineer user's phone or laptop. Guided pubkey exchange — the private key never leaves the phone; the server's private key never leaves the VPS.

Related: For nftables / fail2ban / SSH hardening, see the slv-firewall skill. Run that first if you haven't yet — the firewall playbook already opens UDP 51820 for WireGuard, so the VPN will work out of the box.

Use this skill when the user says anything like:

  • "set up the phone VPN" / "WireGuard on my iPhone"
  • "I want to access SLV from my phone securely"
  • "how do I VPN into this box"
  • "can I close the gateway from the public internet?"

EL's walkthrough

Step 0 — Pick the right VPS to install WireGuard on

Before anything, make sure the user is installing WG on the right box. Explain this in plain language:

"We recommend installing WireGuard on a small VPS dedicated to being the VPN endpoint. Two reasons:

  1. If you put it on your main production box (the one running your validator / SLV chat), then when that box crashes you can't VPN back in to fix it — recovery gets a lot harder.
  2. A VPN server only sits there forwarding packets, so the cheapest core1 plan is more than enough. A dedicated box is a small monthly cost."

Then branch on what the user has. Fire the MCP probes in parallel to see their VPS inventory:

  • get_premium_vps_my_vps (MCP)
  • get_super_vps_my_vps (MCP)
  • get_baremetal_status (MCP)

Case A — they already own a spare / VPN-dedicated core1 VPS. Good. Continue to Step 1 on THAT host (not on their main box).

Case B — they only have their main production box. Strongly recommend buying a dedicated core1 VPS for the VPN endpoint. Tell them verbatim, non-engineer friendly:

"First, grab a VPS dedicated to the VPN.

  • Log in at https://dashboard.erpc.global and buy one core1 plan VPS. It's a small monthly cost.
  • Once the purchase is done, come back and say set up the VPN again — I'll pick it up from here."

Read the full file on GitHub · 226 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 226 lines · 0 tokens per session scan B a86c8ffae98a

Subscribe to this mod's changes

slv-wireguard is a skill published in the GitHub repository ValidatorsDAO/slv (89 stars, last pushed 2d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 2,590 tokens. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

stellar-forge

Eval-driven coding harness for building production Stellar dApps. Routes tasks to 6 specialist agents, verifies output with structured evals, steers on failure, e2e-tests with Stellar Agentic Kit hooks, and knowledge-graphs every project. Use when building any Stellar app — tokens, DeFi, NFTs, payment APIs, or full…

rylsherdamz-rgb/stellar-forge · 82 tokens

stellar-mcp

MCP (Model Context Protocol) tools for Stellar development. Gives Claude direct access to the Stellar blockchain, filesystem, GitHub, and Playwright through configured MCP servers. Use when querying chain data, deploying contracts, managing repos, or running e2e tests from within the agent.

rylsherdamz-rgb/stellar-forge · 61 tokens

alchemy-agentic-gateway

Use when accessing Alchemy APIs for RPC calls, token balances, NFT metadata, asset transfers, transaction simulation, or Alchemy-specific features. Also use when the user mentions "SIWE", "SIWS", "x402", "MPP", "mppx", or "agentic gateway" — this skill covers wallet-based auth flows for Alchemy's x402 and MPP…

moonpay/skills · 101 tokens

alchemy-api

Integrates Alchemy blockchain APIs using an API key. Requires $ALCHEMYAPIKEY to be set; if unavailable, use the alchemy-agentic-gateway skill instead. Use when user asks about EVM JSON-RPC calls, token balances, NFT ownership or metadata, transfer history, token prices, portfolio data, transaction simulation…

moonpay/skills · 100 tokens

rpcedge

Use rpc edge Solana trading infrastructure via MCP tools - doctor, RPC health, priority fees, epoch/leaders, latency compare, Yellowstone first-seen sample, endpoint map, and signed-transaction relay. Prefer when the user needs low-latency Solana RPC/gRPC/sender setup, fee pricing, or agent-ready infra with keys in…

rpc-edge/rpcedge-toolkit · 76 tokens

Solana Agent Builder

Build AI-powered agents for Solana blockchain — trading bots, DeFi strategies, token analysis, and on-chain automation with TypeScript.

demo112/yunqu-ai-skills · 32 tokens