Menu
Inspect and manage my self-hosted AdGuard Home DNS sinkhole. Use when the user asks about AdGuard, DNS blocking, query logs, blocklists/filters, top queried or blocked domains, DNS clients, or wants to toggle protection.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Run two heterogeneous fresh-context Herdr reviewers against both code quality and a governing plan, then synthesize evidence-backed feedback. Use when the user asks for a dual or adversarial review, code-versus-plan verification, or independent Claude and Pi reviewers before deciding whether a PR needs changes.
Control herdr from Codex. Use when the user says "use Herder" or asks to inspect, focus, prompt, spawn, or manage herdr workspaces, tabs, panes, or agents from a Codex session, without deciding whether they are inside or outside herdr.
Use when the user explicitly asks Codex Desktop or another shell outside Herdr to create, inspect, prompt, follow up with, or monitor Herdr agent tabs, or when the `codex-herdr` router skill hands off external control.
Fan out a user-provided task list into one reviewed PR per task through Herdr, then shepherd the PR fleet through CI and review without merging. Use when the user asks to fan out PRs, parallelize backlog items into separate PRs, or autonomously drive multiple agent-owned PRs to green.
Inspect and import content into my self-hosted AutoCaliWeb library. Use for catalog status, search, recent imports, shelves, metadata, or importing an ebook, comic, PDF, or audiobook.
Correct-by-construction TypeScript standards. Use for TypeScript engineering or when another skill needs the user's coding standards.
| name | adguard |
| description | Inspect and manage my self-hosted AdGuard Home DNS sinkhole. Use when the user asks about AdGuard, DNS blocking, query logs, blocklists/filters, top queried or blocked domains, DNS clients, or wants to toggle protection. |
| allowed-tools | Bash, WebFetch |
Manage my self-hosted AdGuard Home (DNS sinkhole / ad-blocker) instance. Inspect status, query logs, stats, configured clients, and filter lists. Toggle DNS protection (mutation — confirm first).
Credentials come from sops-nix (see modules/programs/shell.nix):
ADGUARD_URL — base URL (no trailing slash), e.g. http://192.168.1.109ADGUARD_USERNAME — HTTP basic auth userADGUARD_PASSWORD — HTTP basic auth passwordThe adguard CLI reports a JSON error envelope when they are missing. All API
calls hit the /control/ base path and pass HTTP basic auth.
Use the installed adguard CLI for common operations. It always emits a single
JSON envelope with ok, command, result or error, and next_actions.
scripts/adguard.sh remains as a compatibility shim for older workflows.
adguard status # version, running, protection, dns addrs
adguard version # just version string
adguard stats # 24h query/block counts + top domains
adguard stats-info # stats retention interval (days)
adguard query-log --limit 50 # recent querylog entries
adguard query-log-search example.com --limit 200 # search recent querylog
adguard clients # configured and auto-detected clients
adguard clients-active <ip> # lookup one client by IP
adguard filters # blocklists, allowlists, custom rule count
adguard rules # custom user_rules only
adguard dns-config # full DNS server config
adguard dhcp-status # DHCP server status (if enabled)
adguard protection-toggle on --confirm-toggle # MUTATION, confirm first
For anything not covered, call the API directly with $ADGUARD_URL plus
-u "$ADGUARD_USERNAME:$ADGUARD_PASSWORD" — see references/api-endpoints.md
and references/quick-reference.md.
adguard query-log-search example.com — see when/who hit it.adguard filters — see which list flagged it (the rules
field in querylog points to filter ID + line).adguard rules — check custom user rules for overrides.adguard stats — top clients by query count.adguard clients-active <ip> — resolve an IP to its
configured client profile and per-client overrides.Always confirm with the user before:
adguard protection-toggle on|off --confirm-toggle (disables DNS filtering globally — every device
on the LAN loses ad/tracker blocking until re-enabled)/control/* (filter add/remove, DNS config
changes, DHCP changes, client edits)references/api-endpoints.md — endpoints used by the CLI, with response
shapes verified against the live instance (v0.107.67)references/quick-reference.md — copy-paste curl recipesreferences/troubleshooting.md — 401/403, connection, DNS-side issues/control/ (not /api/v1/).AdGuardHome.yaml; rotating it means editing that YAML, not a UI setting.http://192.168.1.109 (LXC 106), v0.107.67.