lateral-move-ssh SKILL.md skillA
lateral-move-ssh from cha0upup/leoai is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add cha0upup/leoai/lateral-move-ssh@git:20261001.e4dd21aPins git:20261001.e4dd21a in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- cha0upup/leoai
- Path
ai/src/main/resources/skills/agent-node/lateral-move-ssh/SKILL.md- Versions recorded
- 1
- Latest version
- git:20261001.e4dd21a, committed Oct 1, 2026
- Size
- 5,664 bytes
- Repository stars
- 331
- License
- GPL-3.0
使用已授权且已匹配的 SSH 私钥，对明确指定的内网 Linux 目标执行单跳登录和最小分诊，验证能否获得对任务有价值的新立足点。当红队人员已有目标、用户名、私钥路径并明确要求横向验证时使用；不得用于密码喷洒、用户名猜测或自动多跳。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# SSH 单跳横向验证 用一次受控认证回答：凭据是否有效、远端权限是什么、新立足点是否比当前主机更接近演练目标。 ## 行动目标 - 验证一条明确的“源立足点—凭据—目标”路径。 - 成功后在同一 SSH 会话中完成最小主机分诊。 - 判断新主机的权限收益、网络收益、凭据收益和任务价值。 - 达到目标或没有新增价值时停止，不自动继续下一跳。 ## 必要输入 - 用户授权的目标主机和端口。 - 明确用户名，不猜测常见账号。 - 可直接引用的私钥路径或既有 SSH 配置。 - 已知或待核验的主机密钥指纹。 - 本次只读远端命令和成功标准。 缺少凭据时交接 `hunt-credentials`；缺少目标时请求用户提供，不自动扫描网段。 ## 授权与 ROE - 风险等级：high；访问模式：active-login。 - 每次确认只覆盖一个目标和一组凭据。 - 不通过命令行参数传递明文密码，不喷洒、不轮换账号或凭据。 - 不跳过主机密钥校验，不进入交互 Shell。 - 不修改远端文件、authorized_keys、任务、服务或日志。 - 不在新主机自动继续横向；每一跳都要重新选择路径并确认。 - 摘要记录凭据来源和指纹，不记录密码或私钥正文。 ## OPSEC 与失败预算 - 主机指纹采集最多一次，登录认证最多一次。 - `Permission denied` 后立即停止，不用其他用户名或密钥补试。 - 超时或拒绝后不自动扫描替代端口。 - 成功后所有分诊在一次连接中完成，减少认证和会话日志。 - 预先说明目标 `auth.log`/`secure`、lastlog/wtmp 和网络监控可见性。 ## 目标优先级 只有满足必要输入的候选才可执行。优先选择： 1. 与用户指定业务目标直接相关的主机。 2. 已有 SSH config/known_hosts 关联且凭据映射明确的主机。 3. 预计带来新网段、运维权限、关键服务或更高权限的主机。 4. 成功率更高、失败锁定风险更低、噪声更可控的路径。 不要仅因 22 端口开放就尝试登录。 ## 工作流 1. 读取摘要，确认源立足点、目标价值、凭据来源和授权边界。 2. 创建计划：路径核验、用户确认、单次登录、价值评估与交接。 3. 只读检查 SSH 客户端、私钥路径、权限、公钥指纹和 known_hosts。 4. 主机密钥未知时低频采集一次指纹，并与登录动作一起请求确认。 5. 调用 `request_user_input`，列明源/目标、端口、用户名、凭据来源、主机指纹、远端命令、认证次数、日志影响和停止条件；随后停止本轮。 6. 用户确认后执行批准的单次登录和一次性分诊。 7. 评估新立足点价值，用一次摘要追加保存结果并完成计划。 ## 确认前核验 ```bash …
Read the whole file at its exact version.
How to install
mdr add cha0upup/leoai/lateral-move-ssh@sha256:84747e9d5f04c713The line at the top of this page pins the label git:20261001.e4dd21a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_xqquslzgxqxsaq4k)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Oct 1, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (5664 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
cha0upup/leoai · 331 stars · license GPL-3.0 · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_xqquslzgxqxsaq4k GET https://markdownregistry.com/api/v1/resolve?ref=cha0upup/leoai/lateral-move-ssh GET https://markdownregistry.com/api/v1/blob/84747e9d5f04c713f798ac243eda68c9a65381bfee433c183bec2db0b2bdc965
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.