Menü
Run shell commands on remote hosts via SSH, and transfer files via SCP. Allowlist-gated.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Basierend auf der SOC-Berufsklassifikation
| name | SSH Exec |
| description | Run shell commands on remote hosts via SSH, and transfer files via SCP. Allowlist-gated. |
| requires | {"bins":["ssh","scp"],"env":["SSH_EXEC_ALLOWED_HOSTS"]} |
Execute commands on remote Linux hosts through the system ssh client. Uses
key-based auth only (BatchMode=yes — no interactive password prompts). Hosts
must be explicitly allowlisted.
prod01"/var/log/syslog on home-server"tmux-remotedocker-apistatus — allowlist + bin versionsexec — host, command; optional timeout_secs (default 30, max 600), identity_filescp_upload — host, local_path, remote_pathscp_download — host, remote_path, local_path| Var | Required | Notes |
|---|---|---|
SSH_EXEC_ALLOWED_HOSTS | yes | comma-separated user@host or ~/.ssh/config alias |
SSH_EXEC_ALLOW_WRITES | for scp_upload | must be "true" |
SSH_EXEC_TIMEOUT_SECS | no | default 30 |
SSH_BIN / SCP_BIN | no | override binaries |
-32041 host not allowedStrictHostKeyChecking=accept-new — first connect auto-adds host key; subsequent changes failBatchMode=yes — password-protected keys without agent will fail. Use ssh-agent or unencrypted deploy keysSSH_EXEC_ALLOW_WRITES=true. Download is read-only, ungatedstdout truncated at 16 KB, stderr at 8 KBBounded auto-iteration for a prompt with explicit stop predicates.
Memory hygiene workflow to classify, deduplicate, and promote durable knowledge across local memory layers.
Bounded simplification pass for a file or hunk that preserves behavior while reducing complexity.
Turn a repeatable workflow into a reusable local SKILL.md with explicit steps, criteria, and safe defaults.
Bounded auto-debug loop for failing build/test commands with evidence-first diagnosis.
Safely update Nexo config files with read-before-write merges, schema-aware mapping, and reload/restart awareness.