amnezia-vpn SKILL.md skillA

This file is byte-identical to the first copy the registry indexed, one of 3 indexed copies. Same content hash, so the same checks give both the same grade.

amnezia-vpn from nordz0r/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add nordz0r/skills/amnezia-vpn@git:20261024.d08f755

Pins git:20261024.d08f755 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
nordz0r/skills
Path
amnezia-vpn/SKILL.md
Versions recorded
5
Latest version
git:20261024.d08f755, committed Oct 24, 2026
First version recorded
Sep 19, 2026
Size
5,749 bytes
Repository stars
8
License
none declared

Optimal configuration of AmneziaWG and Xray VPN (not installation or deployment). AmneziaWG 1.0-3.1 parameters and recipes: Jc/Jmin/Jmax, S1-S4, H1-H4, I1-I5 mimicry, HeaderProtectionKey, ContentPaddingAddition, RandomTrailers, DisableCookies, MTU, strong DPI / mobile / router kmod / old clients. Xray-core VLESS server and client config.json: transport choice (RAW, XHTTP modes, Hysteria 2), flow/Vision, REALITY target donor, serverNames, shortIds, fingerprint, FinalMask, VLESS Encryption…

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# AmneziaWG and Xray: optimal configuration

Configuration only: choosing parameters, writing and validating server/client configs and keys.
Installation, Docker, systemd, VPS prep and launch are out of scope — except the engine choice (see Key rules), because it changes the config.

Not here: OpenWrt AWG UCI/LuCI → `amneziawg-openwrt-guide`; router-wide sing-box → `podkop-openwrt-guide`;
Linux policy routing → `linux-routing`.

## Procedure: choosing the optimal config

1. **Collect constraints.** Server engine and version (amneziawg-go / kmod / Xray-core); every client app and version;
   network: is UDP passing, is there DPI or active probing, mobile/CGNAT, CDN needed, IP/ASN blocked.
   IP/ASN block or allow-lists → config cannot fix it; say so.
2. **Pick the protocol.**
   | Situation | Choice |
   |---|---|
   | UDP passes, full tunnel, phones/routers | AmneziaWG → `awg-config.md` |
   | UDP cut, active probing, SNI allow-lists | Xray VLESS + REALITY + Vision (RAW) → `xray-config.md` |
   | Need CDN / HTTP-shaped traffic | Xray VLESS + XHTTP → `xray-xhttp-finalmask.md` |
   | Both available | AWG primary + Xray on TCP/443 as fallback |
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add nordz0r/skills/amnezia-vpn@sha256:708063b2576ab6b2

The line at the top of this page pins the label git:20261024.d08f755, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_gn36a46dwjnaesmh.svg)](https://markdownregistry.com/a/art_gn36a46dwjnaesmh)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 5 versions of this file, between Sep 19, 2026 and Oct 24, 2026, about one every 9 days.

versioncommittedcommitsizeaudit
git:20261024.d08f755 latest2026-10-24 d08f755 5,749 BA view · diff
git:20261015.f45d10f2026-10-15 f45d10f 5,296 BA view · diff
git:20261015.e46a7932026-10-15 e46a793 5,192 BA view · diff
git:20261013.df0a08f2026-10-13 df0a08f 2,711 BA view · diff
git:20260919.c5defa22026-09-19 c5defa2 3,119 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (5749 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

nordz0r/skills · 8 stars · license none declared · pushed 2026-10-24 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_gn36a46dwjnaesmh
GET https://markdownregistry.com/api/v1/resolve?ref=nordz0r/skills/amnezia-vpn
GET https://markdownregistry.com/api/v1/blob/708063b2576ab6b24fde854e555019de94ece454338dbfc2b7dde79bb7e52d76

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from nordz0r/skills

AGENTS.md AGENTS.md file
nordz0r/skills · AGENTS.md
git:20261022.625309c · audit A · 8 stars
administering-linux SKILL.md skill
nordz0r/skills · administering-linux/SKILL.md · Hands-on Linux administration of a systemd host: journalctl, systemctl, unit, drop-in, failed-service after reboot…
git:20261013.df0a08f · audit A · 8 stars
agency-database-optimizer SKILL.md skill
nordz0r/skills · agency-database-optimizer/SKILL.md · Database design, migration safety, indexing, EXPLAIN analysis, query tuning, connection management, and production-safe…
git:20261013.316320c · audit A · 8 stars
agency-devops-automator SKILL.md skill
nordz0r/skills · agency-devops-automator/SKILL.md · Automation-first platform delivery for CI/CD, Terraform, Ansible, Kubernetes, k3s, Helm, Vault, qdrant, release…
git:20261013.316320c · audit A · 8 stars
agency-incident-response-commander SKILL.md skill
nordz0r/skills · agency-incident-response-commander/SKILL.md · Structured incident handling for outages, live incidents, SEV triage, rollback decisions, stakeholder updates…
git:20261013.316320c · audit A · 8 stars
agency-security-engineer SKILL.md skill
nordz0r/skills · agency-security-engineer/SKILL.md · Practical application and platform security for threat modeling, authn and authz review, secret handling, hardening…
git:20261013.316320c · audit A · 8 stars
agency-sre SKILL.md skill
nordz0r/skills · agency-sre/SKILL.md · Reliability engineering for SLO, SLI, SLOs, SLIs, observability, alert quality, capacity, saturation, toil reduction…
git:20261013.316320c · audit A · 8 stars
agency-technical-writer SKILL.md skill
nordz0r/skills · agency-technical-writer/SKILL.md · Technical writing for READMEs, runbooks, runbook rewrite, stale docs, contributor guide, CONTRIBUTING, infra repo…
git:20261013.316320c · audit A · 8 stars
amneziawg-openwrt-guide SKILL.md skill
nordz0r/skills · amneziawg-openwrt-guide/SKILL.md · AmneziaWG on OpenWrt routers: packages kmod-amneziawg, amneziawg-tools, luci-proto-amneziawg…
git:20261015.f69f57c · audit A · 8 stars
ansible-playbook SKILL.md skill
nordz0r/skills · ansible-playbook/SKILL.md · Ansible playbooks and roles: ansible-playbook, undefined variable, variable precedence, idempotency, changed tasks…
git:20261013.df0a08f · audit A · 8 stars
atlassian SKILL.md skill
nordz0r/skills · atlassian/SKILL.md · Hands-on Atlassian work through Python utilities: Jira (issues, JQL search, workflow transitions, agile boards…
git:20261013.c62b85e · audit A · 8 stars
context-audit SKILL.md skill
nordz0r/skills · context-audit/SKILL.md · Audit agent context composition, token budgets, and static versus dynamic inflation across system prompts, tool…
v1.0.0 · audit A · 8 stars

Every file in nordz0r/skills

Other files named amnezia-vpn

amnezia-vpn SKILL.md skill
nordz0r/skills · plugins/all-skills/skills/amnezia-vpn/SKILL.md · Optimal configuration of AmneziaWG and Xray VPN (not installation or deployment). AmneziaWG 1.0-3.1 parameters and…
git:20261024.d08f755 · audit A · 8 stars
amnezia-vpn SKILL.md skill
nordz0r/skills · plugins/infra-linux/skills/amnezia-vpn/SKILL.md · Optimal configuration of AmneziaWG and Xray VPN (not installation or deployment). AmneziaWG 1.0-3.1 parameters and…
git:20261024.d08f755 · audit A · 8 stars

Browse by kind, by grade A, or by owner.