tor-egress-audit

Audit outbound traffic, DNS resolution, and onion services for proxy compliance.

Updated Jun 22, 2026
One-click install
npx skills add https://github.com/skylarsabo/code-ops --skill tor-egress-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: tor-egress-audit
Source: https://github.com/skylarsabo/code-ops/tree/main/plugins/privacy-opsec-suite/skills/tor-egress-audit
Command: npx skills add https://github.com/skylarsabo/code-ops --skill tor-egress-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill verifies that no network traffic escapes the proxy/Tor setup, ensuring the user's anonymity and security.

Core Features & Use Cases

  • Network Egress Audit: Inspects all outbound network behavior to confirm traffic follows the Tor/SOCKS/proxy route.
  • Proxy Enforcement: Checks that traffic intended for anonymity actually traverses the Tor proxy.
  • DNS Leak Prevention: Ensures DNS lookups are resolved through the proxy, not the system resolver.
  • Stream Isolation: Verifies that unrelated activities or identities use separate circuits for isolation.
  • Onion Service Hygiene: Validates onion service configurations to prevent IP leaks and maintain anonymity.
  • Use Case: For organizations that require strict anonymity and need to ensure that no sensitive data is leaked through network egress.

Quick Start

Run the /privacy-opsec-suite:tor-egress-audit command to initiate the egress audit.

Frequently Asked Questions about tor-egress-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit outbound network traffic to prevent leaks through a Tor proxy?

To audit outbound network traffic for Tor proxy leaks, you must inspect all egress routes and verify traffic actually traverses the configured SOCKS proxy. This process confirms no sensitive data escapes the anonymity route through comprehensive behavior analysis.

What is DNS leak prevention and how does it secure proxy configurations?

DNS leak prevention ensures all domain name lookups are resolved through the Tor proxy rather than the default system resolver. This mechanism prevents IP leaks during resolution, maintaining strict anonymity by keeping DNS queries inside the encrypted circuit.

How do I verify stream isolation and separate circuits for unrelated Tor activities?

Verifying stream isolation requires checking that unrelated activities or identities use separate Tor circuits. This isolation audit prevents traffic correlation, ensuring distinct network behaviors remain compartmentalized across different proxy routes for security compliance.

What does an onion service configuration audit check to prevent IP leaks?

An onion service configuration audit validates routing hygiene to prevent IP leaks and maintain anonymity. It inspects service configurations to confirm outbound responses strictly follow the Tor network path rather than exposing the underlying server IP.

When do I need a network egress audit for strict anonymity compliance?

You need a network egress audit for strict anonymity compliance when your organization handles sensitive data over Tor. It is required whenever you must guarantee that no network traffic escapes the proxy setup and all DNS resolution remains isolated.

Related Skills