Tailscale Manager

基于 python3 脚本调用本机 Tailscale CLI，提供状态总览、设备列表、本机 IP、ping 主机、网络诊断、serve 配置查询和 IP 归属查询等只读命令，支持结构化输出；结果中的公网 IP 会被替换为掩码，不进行任何写操作。

lookupmark

热度 44.37

最近更新 2026-05-11 17:40:12

分类：自动化依赖：代码执行应用场景：DevOps / 自动化脚本 / 工作流

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add lookupmark-tailscale-manager

Metadata

name: tailscale-manager
description: Manage Tailscale tailnet from chat. Check status, list devices, ping hosts, run network diagnostics, check serve/funnel config. All public IPs are automatically masked in output (after JSON parsing, not before). Triggers on "tailscale status", "tailnet", "connected devices", "network check", "ping tailscale", "tailscale devices", "chi è connesso". NOT for: modifying serve/funnel config, administrative Tailscale operations.
dependencies: ["tailscale CLI (https://tailscale.com/kb/1080/cli)"]

Tailscale Manager

Secure Tailscale network management with automatic IP masking.

Usage

python3 scripts/tailscale_ctrl.py status          # Network overview
python3 scripts/tailscale_ctrl.py devices         # Connected devices
python3 scripts/tailscale_ctrl.py ip              # This device's IPs
python3 scripts/tailscale_ctrl.py ping <host>     # Ping a device
python3 scripts/tailscale_ctrl.py netcheck        # Network diagnostics
python3 scripts/tailscale_ctrl.py serve-status    # Current serve config
python3 scripts/tailscale_ctrl.py whois <ip>      # Who is this IP

All commands support --json for structured output.

Security

Command whitelist: Only safe read-only commands (status, ip, ping, netcheck, whois, serve-status)
No write access: Cannot modify serve/funnel config, change ACLs, or administer tailnet
IP masking: Public IPs automatically replaced with [IP-MASKED]
No auth keys: Never accesses or exposes Tailscale auth keys
No secrets: Does not read config files or tokens

What's Masked

Kept	Masked
Tailscale IPs (100.x.x.x)	Public IPs
DNS names	External IPs
Online/offline status	—