Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add automateyournetwork/netclaw --skill radkit-remote-accessgit clone --depth 1 https://github.com/automateyournetwork/netclawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/automateyournetwork/netclaw/radkit-remote-access)<a href="https://agentmods.dev/skills/automateyournetwork/netclaw/radkit-remote-access"><img src="https://agentmods.dev/badge/skills/automateyournetwork/netclaw/radkit-remote-access.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 161 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00064 | $0.02198 |
| Opus 5 | $0.00032 | $0.01099 |
| Sonnet 5 | $0.00013 | $0.00440 |
| Haiku 4.5 | $0.00006 | $0.00220 |
Grade A, and why
radkit-remote-access scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 185 lines — stays where its author put it; the contents beside it link to each section on GitHub.
RADKit Remote Device Access
MCP Server
- Repository: CiscoDevNet/radkit-mcp-server-community
- Transport: stdio (Python via FastMCP), SSE, or HTTPS
- Requires:
RADKIT_IDENTITY,RADKIT_DEFAULT_SERVICE_SERIAL, active RADKit service instance - Python: 3.10+
How RADKit Works
RADKit provides a cloud-relayed path to on-premises devices:
NetClaw Agent --> RADKit Cloud --> RADKit Service (on-prem) --> Device (CLI/SNMP)
- The RADKit Service runs inside the network perimeter, onboarded with access to devices
- The RADKit Client (this MCP server) authenticates via certificate-based identity
- All communication is encrypted, relayed through Cisco's RADKit cloud infrastructure
- No direct SSH/SNMP from the agent host to the devices is needed
This is ideal for:
- Air-gapped networks where the AI agent cannot directly SSH to devices
- Cloud-hosted agents that need to reach on-premises devices
- Multi-site operations where a single RADKit service provides access to many devices
- Secure environments where certificate-based auth is required (no passwords in transit)
MCP Tools
| Tool | Parameters | What It Does |
|---|---|---|
get_device_inventory_names |
none | List all onboarded device names from the RADKit service |
get_device_attributes |
target_device |
Retrieve device details in JSON: host, type, configs, SNMP/NETCONF status, capabilities |
exec_cli_commands_in_device |
target_device, commands, timeout?, max_lines? |
Execute CLI commands on a device with timeout and line-limit controls |
snmp_get |
target_device, oid(s), timeout? |
Perform SNMP GET operations without CLI execution |
exec_command |
target_device, commands |
Structured command execution — returns dict/list with status and truncation info |
Tool Details
get_device_inventory_names
Discovers all devices onboarded to the RADKit service. Call this first to know what devices are available.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 185 lines · 64 tokens per session scan A e97c03e4b683
radkit-remote-access is a skill published in the GitHub repository automateyournetwork/netclaw (651 stars, last pushed 2d ago), licensed Apache-2.0. It adds 64 tokens to every session and 2,198 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
opentrons-integration
Official Opentrons Protocol API for OT-2 and Flex robots. Use when writing protocols specifically for Opentrons hardware with full access to Protocol API v2 features. Best for production Opentrons protocols, official API compatibility. For multi-vendor automation or broader equipment control use pylabrobot.
pylabrobot
Vendor-agnostic lab automation framework. Use when controlling multiple equipment types (Hamilton, Tecan, Opentrons, plate readers, pumps) or needing unified programming across different vendors. Best for complex workflows, multi-vendor setups, simulation. For Opentrons-only protocols with official API…
x-smart
SMART disk health monitoring tool. Check disk health, temperature, and attributes using smartctl. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
hz-unity-meta-movement-sdk-retargeting
Set up and tweak Meta Movement SDK (MSDK) retargeting for a character model. Use this whenever the user wants to retarget a humanoid FBX/prefab for Meta Quest body tracking, generate a retargeting config, or hand-edit the resulting .json (fix known-joint mappings, exclude joints from auto-mapping, rename target…
hz-psdk-integration
For 3P / EXTERNAL developers: guides interactive Horizon Platform SDK (PSDK) integration for Meta Quest and Horizon OS Android/Kotlin apps — analyzes the codebase, recommends public platform features, plans the integration, and validates on device. Uses the external toolchain (Gradle, metavr, a developers.meta.com /…
hz-quest-verify-first
MANDATORY pre-flight check before answering any question or writing any code related to Meta Quest VR headsets (Quest 2, Quest 3, Quest 3S, Quest Pro) or apps that target them. Forces verification against authoritative Meta sources via the metavr CLI / metavr MCP tools BEFORE relying on training-data knowledge.…