Home / sleepinginsummer / agent-ssh-cli · GitHub

agent-ssh-cli SKILL.md skillA

agent-ssh-cli from sleepinginsummer/agent-ssh-cli is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add sleepinginsummer/agent-ssh-cli/agent-ssh-cli@git:20261104.67b2662

Pins git:20261104.67b2662 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
sleepinginsummer/agent-ssh-cli
Path
SKILL.md
Versions recorded
12
Latest version
git:20261104.67b2662, committed Nov 4, 2026
First version recorded
Aug 2, 2026
Size
24,471 bytes
Repository stars
86
License
MIT

使用基于 SSH 的 CLI 安全操作远端服务器并管理本地连接配置。适用于列出连接、远程执行命令、上传下载文件、启动或停止可视化配置编辑器，以及确认参数、返回值、配置路径和环境校验步骤的场景。.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# agent-ssh-cli 使用说明

`agentsshcli` 是一个通过 npm 安装、由 Rust 原生执行器完成 SSH 操作的命令行工具，用于让 AI 或用户通过本地配置安全地操作远端服务器。

它能做的事：

- 列出本地配置中的 SSH 服务器连接
- 在指定远端服务器上执行命令
- 使用用户明确确认的 SHA256 指纹登记 SSH 主机公钥到本机 `known_hosts`
- 上传本地文件到远端服务器
- 从远端服务器下载文件到本地
- 通过命令黑白名单限制可执行命令
- 通过 Rust daemon 短时间缓存 SSH 连接，减少连续操作时的重复连接开销
- 通过仅监听本机回环地址的可视化编辑器管理连接、凭据引用和安全策略
- npm 安装会按当前系统自动拉取对应平台的 optional 预编译包，当前支持 macOS arm64/x64、Linux x64/arm64、Windows x64

它不做的事：

- 不输出明文密码、私钥等敏感认证信息；密码可按配置加密保存到本机 `secrets.json`，仅通过 SSH channel stdin 发送
- 不扫描网络或发现服务器，只使用配置文件中的连接
- 不绕过配置中的命令限制

命令黑白名单使用 JavaScript `RegExp` 语法，不是 POSIX 正则。空白字符要写成 `\\s`，不要写 `[:space:]`。例如：

```json
{
  "commandBlacklist": [
    "(^|[;&|()\\s])rm(\\s|$)",
    "(^|[;&|()\\s])shutdown(\\s|$)",
    "(^|[;&|()\\s])reboot(\\s|$)"
  ]
}
```

## 安全确认

执行危险操作前必须先向用户确认，不能直接执行。

危险操作包括：

- 删除、清空、覆盖文件或目录，例如 `rm`、`truncate`、重定向覆盖、批量删除
- 清理缓存、日志、临时目录或业务数据
- 重启、关机、停止服务或杀进程，例如 `reboot`、`shutdown`、`systemctl stop`、`kill`
- 修改权限、所有者、系统配置或启动项，例如 `chmod`、`chown`、编辑 `/etc` 下文件
- 上传文件覆盖远端已有文件
- 下载文件覆盖本地已有文件
- 任何不可逆、影响线上服务、影响数据完整性的操作

确认时必须说明目标连接名、命令或文件路径、可能影响，并等待用户明确同意后再执行。

## 环境校验

调用前优先检查 CLI 本身是否可用：

```bash
agentsshcli --help
```

如果上面的命令失败，再向下检查基础环境：

```bash
node --version
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add sleepinginsummer/agent-ssh-cli/agent-ssh-cli@sha256:064e532edad9a535

The line at the top of this page pins the label git:20261104.67b2662, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_egkerahkqlks5d57.svg)](https://markdownregistry.com/a/art_egkerahkqlks5d57)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 12 versions of this file, between Aug 2, 2026 and Nov 4, 2026, about one every 9 days.

versioncommittedcommitsizeaudit
git:20261104.67b2662 latest2026-11-04 67b2662 24,471 BA view · diff
git:20261021.2449f2a2026-10-21 2449f2a 24,224 BA view · diff
git:20261014.3ad52532026-10-14 3ad5253 23,840 BA view · diff
git:20260930.af0ac1f2026-09-30 af0ac1f 23,641 BA view · diff
git:20260929.16156cc2026-09-29 16156cc 23,004 BA view · diff
git:20260924.d2c7d1d2026-09-24 d2c7d1d 21,814 BA view · diff
git:20260922.5dc4b692026-09-22 5dc4b69 21,286 BA view · diff
git:20260910.7a4c9732026-09-10 7a4c973 18,413 BA view · diff
git:20260907.f1acbc12026-09-07 f1acbc1 18,157 BA view · diff
git:20260907.91a682f2026-09-07 91a682f 16,661 BA view · diff
git:20260802.cb44f9b2026-08-02 cb44f9b 15,728 BA view · diff
git:20260802.5d9635f2026-08-02 5d9635f 15,601 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (24471 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

sleepinginsummer/agent-ssh-cli · 86 stars · license MIT · pushed 2026-11-04 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_egkerahkqlks5d57
GET https://markdownregistry.com/api/v1/resolve?ref=sleepinginsummer/agent-ssh-cli/agent-ssh-cli
GET https://markdownregistry.com/api/v1/blob/064e532edad9a535bf4b1a9c9f3b2b8064d60fba34133245bbcacda702b28d3e

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

Browse by kind, by grade A, or by owner.