home-network-optimizer-skill

---

name: home-network-optimizer description: Safely diagnose and optimize home networks involving ISP gateways, optical modems, routers, access points, bridge/AP mode, double NAT, Wi-Fi 5/6/7, channels, bandwidth, guest networks, WPS, UPnP, DHCP reservations, router security, "穿墙", "蹭网", "光猫", "路由器", "软路由", and similar home-network troubleshooting. metadata: version: "0.2.0" compatibility: "Agent Skills / Codex / Claude Code / Kimi Code"

Home Network Optimizer

Core stance

Optimize for continuity first. Home-network work often happens through the same Wi-Fi, router, VPN, or gateway that keeps the conversation alive. Preserve the user's ability to communicate before chasing marginal speed gains.

Use evidence before action. Collect the current topology, IP/gateway state, wireless link state, and user constraints before changing settings. Make one meaningful change at a time, then validate.

Read references/home-network-playbook.md for detailed router/AP decisions, channel planning, feature recommendations, validation commands, and the end-of-task template. Read references/cross-tool-install.md when the user wants to install this skill in Codex, Claude Code, Kimi Code, or another Agent Skills-compatible tool.

Operating modes

1. Advice-only mode: explain tradeoffs, risks, or recommended settings when the user is not ready to touch the router UI.
2. Guided-router mode: walk the user through admin pages step by step. Warn before any step that can restart Wi-Fi, change the LAN subnet, drop management access, or require cable moves.
3. Local-diagnostics mode: run safe client-side checks when available, such as IP/gateway, ping, RSSI, channel, PHY mode, and transmit rate. Do not change the client to manual IP.
4. Skill-maintenance mode: when the user asks to improve, publish, or port this skill, use references/evaluation-prompts.md and keep the skill portable across mainstream coding assistants.

Hard safety boundaries

• Do not disable VPN/proxy tools when the user says they are required for the session.
• Do not remotely switch the user's computer or phone to a manual IP unless there is an explicit local recovery path.
• Do not factory reset, firmware-upgrade, reboot, or bridge the main ISP gateway while still diagnosing.
• Do not change SSID/password casually; it can disconnect every household device.
• Do not enable wireless repeater mode when wired backhaul exists.
• Do not enable DMZ, UPnP, port forwarding, or remote management on APs for "optimization".
• Do not expose Wi-Fi passwords, router passwords, ISP credentials, serial numbers, or private topology details in summaries or repositories.
• Do not guess high-privilege ISP gateway credentials or bypass access controls. Explain legitimate support/installer paths instead.

Evidence-first workflow

1. Establish topology.

   • Identify ISP gateway/optical modem, main router, APs, mesh nodes, switches, client location, and backhaul type.
   • Record management IPs, LAN subnets, DHCP/NAT owner, uplink ports, and whether each device is routing or bridging.
   • Look for double NAT: downstream clients in a different private subnet, or a downstream router with a private WAN IP while it also runs DHCP/NAT.

2. Classify the request.

   • Speed: ISP plan, WAN/LAN port speed, wired backhaul, Wi-Fi PHY/channel/bandwidth, RSSI/noise, client capability.
   • Coverage: AP placement, walls/floors, 2.4 GHz vs 5 GHz, channel overlap, roaming behavior.
   • Topology: one routing authority, secondary routers as AP/bridge, DHCP reservations, management IP stability.
   • Security: WPS, guest isolation, remote management, UPnP/DMZ/port forwarding, unknown clients.
   • Upgrade advice: whether a soft router, mini PC, mesh kit, AP, switch, or cable change solves the actual bottleneck.

3. Preserve control.

   • Keep clients on DHCP.
   • Before a risky setting, state the expected interruption, recovery path, and what success should look like.
   • Before a physical cable move, name the exact old port, new port, and moment to move it.

4. Apply the smallest useful change.

   • Prefer one DHCP/NAT authority, usually the ISP gateway or a deliberate main router.
   • Convert secondary routers to bridge/AP mode, or disable DHCP and use LAN-to-LAN when true AP mode is unavailable.
   • Assign or reserve predictable AP management IPs when the gateway permits it.
   • Tune Wi-Fi by role instead of enabling every feature.

5. Validate immediately.

   • Confirm client IP, subnet, gateway, route, and AP management reachability.
   • Ping the main gateway and AP. Treat zero packet loss and steady latency as more important than one peak speed test.
   • Check Wi-Fi PHY mode, channel, bandwidth, RSSI/noise, transmit rate, and intended AP/band attachment.
   • If validation worsens, stop and propose rollback or a less disruptive alternative.

6. Summarize for reuse.

   • Report final topology, management IPs, DHCP/NAT owner, AP roles, Wi-Fi settings, disabled features, and remaining bottlenecks.
   • Give a simple household policy: which SSID/band to use for nearby speed devices, far rooms, IoT, and guests.

Practical thresholds

• RSSI around -30 to -60 dBm: good for 5 GHz.
• RSSI around -60 to -70 dBm: usable but may show speed drops.
• RSSI below -75 dBm on 5 GHz: consider 2.4 GHz, AP relocation, or another AP.
• 5 GHz 80 MHz is the default speed/stability setting for most homes.
• 2.4 GHz 20 MHz on channels 1, 6, or 11 is the default penetration/stability setting.
• A wired 1 Gbps backhaul is more valuable than repeater features or speculative toggles.

Cross-tool portability

This skill uses the portable Agent Skills shape: SKILL.md frontmatter plus optional references/ files. Avoid relying on Codex-only APIs inside the skill instructions. When running in Claude Code, Kimi Code, or another assistant, adapt browser and terminal steps to that tool's available capabilities while preserving the same safety boundaries and validation gates.

Deliverables

When wrapping up, include:

• Final topology and each device's role.
• Management IPs and which device owns DHCP/NAT.
• Wi-Fi band/channel/bandwidth decisions.
• Which features were left off and why.
• Validation results and any unverified assumptions.
• Residual bottlenecks: ISP plan, gateway permissions, cable/port limits, wall layout, AP placement, DHCP reservation limits, or roaming behavior.
• A short "how to use the network" policy for household devices.

--- README.md ---

Home Network Optimizer Skill / 家庭网络优化 Skill

A portable Agent Skill for safely diagnosing and optimizing real home networks: ISP gateways, optical modems, routers, AP/bridge mode, double NAT, Wi-Fi 5/6/7, channel planning, DHCP, guest networks, WPS, UPnP, DMZ, remote management, and router security.

这个 skill 用于把“家里网速慢、Wi-Fi 穿墙差、二级路由混乱、光猫和路由器双 NAT”等问题，整理成一套可复用、可验证、尽量不断线的优化流程。

Highlights / 核心特点

• Connectivity first: avoid breaking the very network the assistant is using to help.
• Evidence before action: collect topology, IP/gateway, AP role, channel, bandwidth, RSSI, and ping before changing settings.
• One-change validation: change one meaningful setting, validate, then continue or roll back.
• Conservative security: keep WPS, remote management, DMZ, and AP-side UPnP/port forwarding off unless there is a real need.
• Portable packaging: works as a Codex skill and is structured for Claude Code, Kimi Code, and other Agent Skills-compatible tools.

中文简述：

• 先保连接，再做优化。
• 先看证据，再改设置。
• 一次只改一个关键项，改完马上验收。
• 安全设置默认保守，不为“提速”乱开高风险功能。
• 不只给 Codex 用，也适配 Claude Code、Kimi Code 等主流代码助手的 skill 形态。

Install / 安装

Codex

mkdir -p ~/.codex/skills
git clone https://github.com/ztaoz/home-network-optimizer-skill.git ~/.codex/skills/home-network-optimizer

Invoke:

Use $home-network-optimizer to safely diagnose and optimize my home router, AP, and Wi-Fi setup.

中文：

使用 $home-network-optimizer 帮我安全优化家里的光猫、路由器、AP 和 Wi-Fi。

Claude Code

Global install:

mkdir -p ~/.claude/skills
git clone https://github.com/ztaoz/home-network-optimizer-skill.git ~/.claude/skills/home-network-optimizer

Project install:

mkdir -p .claude/skills
git clone https://github.com/ztaoz/home-network-optimizer-skill.git .claude/skills/home-network-optimizer

Kimi Code

Global install:

mkdir -p ~/.kiro/skills
git clone https://github.com/ztaoz/home-network-optimizer-skill.git ~/.kiro/skills/home-network-optimizer

Project install:

mkdir -p .kiro/skills
git clone https://github.com/ztaoz/home-network-optimizer-skill.git .kiro/skills/home-network-optimizer

See references/cross-tool-install.md for compatibility notes and safety checks.

Example Prompts / 示例提示词

Use $home-network-optimizer to check whether my second router is causing double NAT.

使用 $home-network-optimizer 检查我家的二级路由是不是造成了双 NAT。

使用 $home-network-optimizer 优化二楼 Wi-Fi 6 速度和卧室穿墙稳定性。

使用 $home-network-optimizer 总结我家最终网络拓扑和路由器设置。

Structure / 目录结构

home-network-optimizer-skill/
├── LICENSE
├── README.md
├── SKILL.md
├── agents/
│   └── openai.yaml
└── references/
    ├── cross-tool-install.md
    ├── evaluation-prompts.md
    └── home-network-playbook.md

• SKILL.md: concise trigger, safety boundaries, and operating workflow.
• references/home-network-playbook.md: detailed home-network playbook, thresholds, templates, and validation checklists.
• references/cross-tool-install.md: Codex, Claude Code, Kimi Code, and generic Agent Skills installation notes.
• references/evaluation-prompts.md: trigger, non-trigger, and safety regression prompts for maintaining skill quality.
• agents/openai.yaml: Codex/OpenAI UI metadata.

What This Version Learned / 本次迭代借鉴点

This iteration borrows patterns from mature operational skills and public skill documentation:

• Strong frontmatter and trigger wording, so the assistant knows when to load the skill.
• Progressive disclosure: short SKILL.md, deeper references only when needed.
• Explicit guardrails for risky actions.
• Validation gates before calling work complete.
• Cross-tool packaging notes instead of assuming one assistant runtime.
• Evaluation prompts to test trigger accuracy and safety behavior.

中文：

• 强化触发描述，减少该触发时不触发、不该触发时乱触发。
• 把核心流程放在 SKILL.md，把详细经验放到 references/。
• 把危险动作写成明确边界。
• 每次关键改动后必须验收。
• 增加 Codex / Claude Code / Kimi Code 的安装说明。
• 增加评估提示词，方便后续继续迭代。

Safety / 安全提醒

Do not commit real Wi-Fi passwords, router admin passwords, ISP credentials, serial numbers, MAC lists, or sensitive household topology to this repository.

不要把真实 Wi-Fi 密码、路由器后台密码、运营商账号、序列号、MAC 列表、家庭私密拓扑等敏感信息提交到仓库。

This skill does not replace a professional site survey or ISP repair. It is meant to make common home-router optimization safer, more systematic, and easier to repeat.

License / 许可证

MIT License. See LICENSE.

本项目使用 MIT 许可证，详见 LICENSE。

Sources / 参考来源

• Claude Code Skills documentation: https://docs.claude.com/en/docs/claude-code/skills
• Kimi Code Skills documentation: https://www.kimi.com/code/docs/en/kimi-code-cli/customization/skills.html
• Agent Skills specification: https://agentskills.io/specification