Run any Skill in Manus with one click

ssh-hygiene

Stars2

Forks0

UpdatedApril 9, 2026 at 09:46

Audit, clean up, and structure SSH config and keys. Use when user asks to "review ssh config", "clean up ssh", "check ssh keys", "add ssh host", "remove dead ssh hosts", "organize ssh keys", or any SSH configuration management task. Also triggers on mentions of ~/.ssh/config, SSH key organization, or 1Password SSH agent setup.

Installation

Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.

Run Skill in Manus

Source

pkarpovich

pkarpovich/environment

View GitHub Repository View Creator Repositories

Download

Run Skill in Manus

Related occupationsSOC

Based on SOC occupation classification

Network and Computer Systems AdministratorsComputer and Mathematical Occupations·SOC 15-1244

File Explorer

2 files

SKILL.md

readonly

name	ssh-hygiene
description	Audit, clean up, and structure SSH config and keys. Use when user asks to "review ssh config", "clean up ssh", "check ssh keys", "add ssh host", "remove dead ssh hosts", "organize ssh keys", or any SSH configuration management task. Also triggers on mentions of ~/.ssh/config, SSH key organization, or 1Password SSH agent setup.

SSH Hygiene

Audit and restructure ~/.ssh/ for clean, secure, 1Password-integrated SSH management.

Target Structure

~/.ssh/
  config
  keys/
    <host-alias>.pub
  known_hosts

Config Format

Host *
  IdentityAgent "~/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock"
  IdentitiesOnly yes
  ServerAliveInterval 60
  ServerAliveCountMax 3

Host <alias>
  HostName <ip-or-hostname>
  User <username>
  IdentityFile ~/.ssh/keys/<alias>.pub

Rules:

Never specify Port 22 (default)
IdentityFile always points to .pub in ~/.ssh/keys/ — 1Password serves private key via agent
No private keys on disk, all in 1Password
2-space indent, no trailing comments, blank line between host blocks

Workflow: Full Audit

Read ~/.ssh/config and ls ~/.ssh/
Run scripts/check_hosts.sh to TCP-check port 22 on each host (3s timeout)
Present table: host, IP, alive/dead
Ask user which alive hosts are also no longer needed
Rewrite config keeping only needed hosts, applying format rules
Move/rename public keys to ~/.ssh/keys/<alias>.pub
Delete orphaned keys (private keys on disk, keys for removed hosts)
Verify: ls ~/.ssh/ and ls ~/.ssh/keys/

Workflow: Add Host

Get alias, hostname/IP, username from user
Check if .pub exists in ~/.ssh/ or ~/.ssh/keys/
If missing — user must create SSH Key in 1Password, export .pub to ~/.ssh/keys/<alias>.pub
Append host block to config

Workflow: Remove Host

Remove host block from config
Delete .pub from ~/.ssh/keys/

Common Fixes

IdentityFile pointing to private key → change to .pub
Absolute paths in IdentityFile → normalize to ~/.ssh/keys/<alias>.pub
IdentitiesOnly yes on individual hosts → remove (covered by Host *)
AddKeysToAgent yes on individual hosts → remove (1Password handles this)
Missing ServerAliveInterval in Host * → add 60/3

More from this repository

same repository

onboarding

pkarpovich/environment

Deep codebase exploration to fully understand the current project before starting work. Use this skill whenever the user says "onboarding", "onboard", "get familiar", "learn the codebase", "understand this repo", "context load", or at the start of a session when the user wants Claude to be fully prepared to work on the project. Also use when switching to an unfamiliar part of the codebase.

2026-07-082

agent-browser

pkarpovich/environment

Core agent-browser usage guide. Read this before running any agent-browser commands. Covers the snapshot-and-ref workflow, navigating pages, interacting with elements (click, fill, type, select), extracting text and data, taking screenshots, managing tabs, handling forms and auth, waiting for content, running multiple browser sessions in parallel, and troubleshooting common failures. Use when the user asks to interact with a website, fill a form, click something, extract data, take a screenshot, log into a site, test a web app, or automate any browser task.

2026-07-032

ralphex-plan-audit

pkarpovich/environment

Audit a ralphex/farm implementation plan (docs/plans/*.md) for self-containment and task concreteness before running it through ralphex or queuing it on ralphex-farm. ralphex runs every task and review in a FRESH session that re-reads only the plan (plus the committed repo and a progress log), so anything that tells the agent to "go read elsewhere", "match 1:1 with an external codebase", or just names a big outcome without saying how to build it silently wastes huge effort and may never converge. Fans out parallel auditor agents that check the plan against rules from real farm failures and returns a farm-ready / fix-these verdict. Use whenever a ralphex plan was just written or is about to be executed or queued - "audit this plan", "check my plan before the farm", "is this plan farm-ready", "review the plan before ralphex", or right after /ralphex-plan or /planning:make and before creating a farm ticket. Do NOT use to create plans (that is ralphex-plan) or operate the farm (that is ralphex-farm).

2026-06-212

github-radar

pkarpovich/environment

Cross-repo GitHub radar - a personal snapshot of the open pull requests and issues that involve you, run from any directory (account-wide, not tied to the current repo). Covers your own repos (every open PR/issue, any author) plus anywhere you are involved on other people's repos (authored, assigned, mentioned, or review-requested). Use this whenever the user wants a GitHub overview or status, asks what PRs or issues need their attention, what is waiting on them, what they have open on GitHub, what they might be forgetting, before standup, or when catching up after time away - including phrasings like "github radar", "my open PRs", "anything waiting on me on github", "what did I leave open", even if they don't name a specific repo. Also supports an optional single-repo scope - when the user names one repository ("github radar for turtle-hub", "what's open in pkarpovich/tuclaw", "PRs and issues in <repo>"), pass that repo and the report covers only it.

2026-06-212

ralphex-farm

pkarpovich/environment

Work with ralphex-farm: an autonomous executor that polls Linear, picks up Todo issues whose description carries a `` YAML block (repo + plan + branch, optional mode), runs ralphex against the named plan inside Docker, and opens a PR. Invoke whenever the user wants to: create a Linear ticket for a plan ("create a ralphex farm task", "add task for plan", "queue plan to the farm"), re-run or recover a failed task ("re-run", "recover", "review only", "move back to Todo"), add a new repository to the farm, trigger an immediate sync, debug why a ticket was not picked up, or answer questions about how the farm works. Also trigger on any mention of the `` metadata block, repos.yaml in the farm context, `/var/ralphex/...` host paths, the farm's `/api/sync` or `/api/repos` endpoints, or Claude plugin provisioning in the farm.

2026-06-212

pkarpovich/environment

Go 1.25+ development standards and coding conventions. Use when writing, reviewing, or refactoring Go code. Triggers on Go file creation/editing, code reviews, architecture decisions, testing strategies, error handling patterns, concurrency, or when user asks about Go best practices.

2026-06-212

name	ssh-hygiene
description	Audit, clean up, and structure SSH config and keys. Use when user asks to "review ssh config", "clean up ssh", "check ssh keys", "add ssh host", "remove dead ssh hosts", "organize ssh keys", or any SSH configuration management task. Also triggers on mentions of ~/.ssh/config, SSH key organization, or 1Password SSH agent setup.

SSH Hygiene

Audit and restructure ~/.ssh/ for clean, secure, 1Password-integrated SSH management.

Target Structure

~/.ssh/
  config
  keys/
    <host-alias>.pub
  known_hosts

Config Format

Host *
  IdentityAgent "~/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock"
  IdentitiesOnly yes
  ServerAliveInterval 60
  ServerAliveCountMax 3

Host <alias>
  HostName <ip-or-hostname>
  User <username>
  IdentityFile ~/.ssh/keys/<alias>.pub

Rules:

Never specify Port 22 (default)
IdentityFile always points to .pub in ~/.ssh/keys/ — 1Password serves private key via agent
No private keys on disk, all in 1Password
2-space indent, no trailing comments, blank line between host blocks

Workflow: Full Audit

Read ~/.ssh/config and ls ~/.ssh/
Run scripts/check_hosts.sh to TCP-check port 22 on each host (3s timeout)
Present table: host, IP, alive/dead
Ask user which alive hosts are also no longer needed
Rewrite config keeping only needed hosts, applying format rules
Move/rename public keys to ~/.ssh/keys/<alias>.pub
Delete orphaned keys (private keys on disk, keys for removed hosts)
Verify: ls ~/.ssh/ and ls ~/.ssh/keys/

Workflow: Add Host

Get alias, hostname/IP, username from user
Check if .pub exists in ~/.ssh/ or ~/.ssh/keys/
If missing — user must create SSH Key in 1Password, export .pub to ~/.ssh/keys/<alias>.pub
Append host block to config

Workflow: Remove Host

Remove host block from config
Delete .pub from ~/.ssh/keys/

Common Fixes

IdentityFile pointing to private key → change to .pub
Absolute paths in IdentityFile → normalize to ~/.ssh/keys/<alias>.pub
IdentitiesOnly yes on individual hosts → remove (covered by Host *)
AddKeysToAgent yes on individual hosts → remove (1Password handles this)
Missing ServerAliveInterval in Host * → add 60/3