Feels fragile. If you slip up even once and connect when not over tor, they'll have your IP. I do like the idea of building these sorts of tools on nostr in order to remove github from the equation entirely.