# Skill pack for cloud VM blocks

An installable agent skill that reads the on-screen string and branches to geo, Cloudflare, CAPTCHA, Imperva, or a login wall.

Operators and agents load this skill when a cloud browser hits a datacenter IP problem. The skill is for the agent. This page is the human companion, with the public source in the Aluvia skills repo.

[Skill source on GitHub](https://github.com/aluvia-connect/skills)

## The command

```sh
npx aluvia-cli setup
```

The shipping install on the VM is still `npx aluvia-cli setup`. The skill tells the agent when to run it.

## When to load it

Use the skill when a cloud agent browser shows Cloudflare Verify you are human, a repeating CAPTCHA, Imperva Error 16 / This request was blocked by our security service, not available in your region, or a 403 on a public URL from a datacenter IP.

The skill id is `aluvia-cloud-vm-blocks`. It lives in [https://github.com/aluvia-connect/skills](https://github.com/aluvia-connect/skills) at path `aluvia-cloud-vm-blocks`.

## Install the skill

The skills repo is public. An operator (or an agent that can install skills) can add this one without an email gate:

```sh
npx skills add aluvia-connect/skills --skill aluvia-cloud-vm-blocks
```

## What the skill teaches

Read the on-screen string first, including a Ray ID or Incident ID if one is present. Then branch. Do not guess the hostname.

- Geo / not available in your region / wrong catalog → `aluvia proxy-on --geo XX` after `aluvia geos`.
- Cloudflare / CAPTCHA / 403 / Imperva / unusual traffic → `aluvia proxy-on`, reload; still blocked → `aluvia rotate-ip`. Add `--geo` when country also matters.
- Password / SSO / 2FA with no IP story → stop. Aluvia is not a login-wall fix.
- Install if missing: `npx aluvia-cli setup`.
- Trial: 10 MB free, no account, no API key. On `payment_required`, show `claim_url` to the human. Paid data is $2/GB.

## The branch, written for a human

If the page is a region miss — not available in your region, we don't ship to your location, or the catalog is the datacenter's country — pick the country the job needs and turn the proxy on. That is the primary use case. Confirm codes with `aluvia geos`. Country only, not city.

If the page is Cloudflare, a repeating CAPTCHA, a 403 on a public URL, unusual traffic, or Imperva Error 16, the datacenter address is one input to that score. A residential or mobile exit sometimes lets the request through. Sometimes. Not a promise. Turn the proxy on, reload, and rotate if the same exit is still dropped.

If a username, password, SSO, or 2FA form is already on screen and the only missing piece is credentials, stop. Changing IP does not complete that form. An IP-triggered login-shaped page that appeared because the client looked like cloud hosting is different: changing the exit IP is the job, and a real login form that appears afterwards is out of scope.

## Limits the skill must keep

- Unblock is sometimes, never a guarantee. Do not claim a Cloudflare pass.
- Does not beat fingerprint, TLS, or canvas.
- Not a human VPN. Not streaming. Not an MCP. Not login bypass.
- Country only, not city.
- Docs live at [https://aluvia.io/docs](https://aluvia.io/docs).

## Further reading

- Triage playbook: [`/resources/triage-geo-cloudflare-imperva`](/resources/triage-geo-cloudflare-imperva).
- Skill source: [https://github.com/aluvia-connect/skills](https://github.com/aluvia-connect/skills), path `aluvia-cloud-vm-blocks`.
- Product home: [https://aluvia.io](https://aluvia.io).

---

Source: https://aluvia.io/resources/cloud-vm-blocks-skill