podkop-openwrt-guide SKILL.md skillA
podkop-openwrt-guide from nordz0r/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add nordz0r/skills/podkop-openwrt-guide@git:20261015.f69f57cPins git:20261015.f69f57c in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- nordz0r/skills
- Path
plugins/all-skills/skills/podkop-openwrt-guide/SKILL.md- Versions recorded
- 3
- Latest version
- git:20261015.f69f57c, committed Oct 15, 2026
- First version recorded
- Sep 2, 2026
- Size
- 5,289 bytes
- Repository stars
- 8
- License
- none declared
Complete guide to Podkop on OpenWrt. Use for any itdoginfo/podkop task: install, update, migrating /etc/config/podkop, selective/domain routing via sing-box, dnsmasq, nft/tproxy, LuCI UI, proxy URL strings (vless, trojan, ss, hysteria2, socks), community/user lists, selector/urltest, exclusion, Clash API/YACD dashboard, BadWAN monitoring, FakeIP, service diagnostics and development of podkop, luci-app-podkop, fe-app-podkop. Triggers: podkop, luci-app-podkop, sing-box on OpenWrt, fakeip…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Podkop OpenWrt Guide
Podkop is an orchestration layer over `sing-box` for OpenWrt: it manages selective routing, edits `dnsmasq`, assembles rules/lists, generates NFTable rules for tproxy and provides a LuCI UI.
Use this skill when you need more than "change something in the config": when you need to understand how Podkop ties together `UCI`, `dnsmasq`, `sing-box`, `nft` and the service lifecycle.
## When to use
- Installing or updating Podkop on an OpenWrt router.
- Migrating the config after an incompatible release.
- Configuring proxy strings, selector/urltest groups, raw outbound JSON.
- Working with community lists, user domains/subnets, remote/local lists.
- Configuring mixed proxy, YACD dashboard, Clash API, FakeIP.
- Connection types: proxy, vpn, block, exclusion.
- BadWAN interface monitoring, DNS (UDP/DoT/DoH), NTP exclusion.
- Diagnosing `sing-box`, `dnsmasq`, `nft`, dashboard or LuCI breakage.
- Developing the shell backend, LuCI UI or TypeScript frontend in the `itdoginfo/podkop` repo.
- Analysing conflicts with `https-dns-proxy`, `nextdns`, `passwall`, `Getdomains`.
## Architecture (high level)
```
UCI config (/etc/config/podkop)
↓
…Read the whole file at its exact version.
How to install
mdr add nordz0r/skills/podkop-openwrt-guide@sha256:27f9d668cd8a03bbThe line at the top of this page pins the label git:20261015.f69f57c, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_gpnlfp6y7n2g425o)
0 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Sep 2, 2026 and Oct 15, 2026, about one every 21 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261015.f69f57c latest | 2026-10-15 | f69f57c | 5,289 B | A | view · diff |
| git:20261013.df0a08f | 2026-10-13 | df0a08f | 5,126 B | A | view · diff |
| git:20260902.6c69dd7 | 2026-09-02 | 6c69dd7 | 6,711 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5289 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
nordz0r/skills · 8 stars · license none declared · pushed 2026-10-24 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_gpnlfp6y7n2g425o GET https://markdownregistry.com/api/v1/resolve?ref=nordz0r/skills/podkop-openwrt-guide GET https://markdownregistry.com/api/v1/blob/27f9d668cd8a03bb1bb6ec2977f3fbe7a863f6b9b1e176f5d6284a6b9c03264d
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.