메뉴
Use when the user wants to SSH into a Linux GCE VM through IAP — install their key on the VM if needed, start a tunnel, and either return the ssh command or open Terminal. Triggers on "ssh into <vm>", "give me a shell on", "open Linux VM".
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Use when the user wants to RDP into a Windows GCE VM through IAP — open an existing saved connection, or set one up from scratch and launch the Microsoft 'Windows App' RDP client. Triggers on phrases like "RDP into <vm>", "open Windows VM", "connect to my Windows server".
Use when the user reports a tunnel that won't start, won't connect, drops, or shows status 'error'. Pulls the tunnel log buffer and walks through likely causes. Triggers on "tunnel broken", "RDP timed out", "ssh hangs", "why isn't my tunnel working".
Use when the user wants to add one or more new GCE VMs as saved connections in IAP Tunnel Manager — including resolving project + zone + platform from natural language and choosing a sensible local port. Triggers on "add a new VM", "save these instances", "bookmark these for IAP".
Use ONLY when the user explicitly asks to rotate, regenerate, or reset a Windows account password on a GCE VM. Use also when the user reports the saved password is stale and they consent to a fresh one. Triggers on "rotate password", "reset Administrator password", "I lost the Windows password".
| name | connect-linux-vm |
| description | Use when the user wants to SSH into a Linux GCE VM through IAP — install their key on the VM if needed, start a tunnel, and either return the ssh command or open Terminal. Triggers on "ssh into <vm>", "give me a shell on", "open Linux VM". |
auth_check → if false, auth_login.connections_list → confirm the chosen one has platform: "linux".username is empty, ask the user, then connections_set_username { connectionId, username }.sshIdentityPath is empty, install a key:
ssh_generate_keypair { connectionId, linuxUsername } — generates Ed25519 locally, installs the public key on the VM, and stores the private key path on the connection.ssh_install_key { connectionId, linuxUsername, publicKey } if the user already has a key they want to push.tunnels_start_for_connection { connectionId } (skip if tunnels_active already lists it).ssh_launch_terminal { connectionId } opens a new Terminal window and runs ssh.ssh_command { connectionId } returns the literal ssh -p <port> ... user@127.0.0.1 so the user can paste it into their own shell.projects_list / vms_list → confirm the VM is Linux (isWindows: false).connections_add { platform: "linux", remotePort: 22, username }. Use displayName like "web-01 (eu-west2-c)".ssh_install_key will succeed on ssh-keys metadata even when OS Login is enabled, but the key won't take effect — the VM uses the IAM-managed key set instead. If the user reports "permission denied", check the VM in the GCP console for the enable-oslogin metadata flag and tell them to either disable it or use OS Login directly.~/Library/Application Support/IAP Tunnel Manager/ssh/ with mode 0600 — mention the path so the user can back it up.accept-new host key policy is on by default; the first connection prints a fingerprint — that's expected.