diff --git a/clusters/tool.json b/clusters/tool.json
index a5de319..a730165 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -11031,12 +11031,17 @@
     },
     {
       "description": "A simple security tunnel written in Golang. Features: Listening on multiple ports, Multi-level forward proxy - proxy chain, Standard HTTP/HTTPS/HTTP2/SOCKS4(A)/SOCKS5 proxy protocols support, Probing resistance support for web proxy, Support multiple tunnel types, TLS encryption via negotiation support for SOCKS5 proxy, Tunnel UDP over TCP, TCP/UDP Transparent proxy, Local/remote TCP/UDP port forwarding, Shadowsocks protocol, SNI proxy, Permission control, Load balancing, Routing control, DNS resolver and proxy, TUN/TAP device",
-      "refs": [
-        "https://cloud.google.com/blog/topics/threat-intelligence/ivanti-post-exploitation-lateral-movement",
-        "https://github.com/ginuerzh/gost/blob/master/README_en.md",
-        "https://v2.gost.run/en/",
-        "https://gost.run/en/"
-      ],
+      "meta": {
+        "refs": [
+          "https://cloud.google.com/blog/topics/threat-intelligence/ivanti-post-exploitation-lateral-movement",
+          "https://github.com/ginuerzh/gost/blob/master/README_en.md",
+          "https://v2.gost.run/en/",
+          "https://gost.run/en/"
+        ],
+        "synonyms": [
+          "GO Simple Tunnel"
+        ]
+      },
       "related": [
         {
           "dest-uuid": "c5ea778c-df2f-4c63-b401-dded9cb2419c",
@@ -11046,9 +11051,6 @@
           "type": "used-by"
         }
       ],
-      "synonyms": [
-        "GO Simple Tunnel"
-      ],
       "uuid": "c9f26173-ba82-4ed2-adbd-e2e07f582f31",
       "value": "GOST"
     },