Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add bug-ops/zeph --skill ssh-remotegit clone --depth 1 https://github.com/bug-ops/zephWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bug-ops/zeph/ssh-remote)<a href="https://agentmods.dev/skills/bug-ops/zeph/ssh-remote"><img src="https://agentmods.dev/badge/skills/bug-ops/zeph/ssh-remote/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bug-ops/zeph/ssh-remote"><img src="https://agentmods.dev/badge/skills/bug-ops/zeph/ssh-remote.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00072 | $0.03185 |
| Opus 5.5 | $0.00029 | $0.01274 |
| Sonnet 5.5 | $0.00014 | $0.00637 |
| Haiku 4.5 | $0.00007 | $0.00318 |
Grade D, and why
ssh-remote scanned grade D with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
ssh -t user@host 'sudo systemctl restart nginx' Reaches for credential fileshighPrivilege escalation
SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.
ssh-keygen -p -f ~/.ssh/id_ed25519 Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
# Use with curl How it starts
The opening of the file, as written. The whole thing — 462 lines — stays where its author put it; the contents beside it link to each section on GitHub.
SSH, SCP, and Rsync
Quick Reference
| Task | Command |
|---|---|
| Connect | ssh user@host |
| Connect on port | ssh -p 2222 user@host |
| Run remote command | ssh user@host 'command' |
| Generate key | ssh-keygen -t ed25519 |
| Copy key to server | ssh-copy-id user@host |
| Copy file to remote | scp file.txt user@host:/path/ |
| Copy file from remote | scp user@host:/path/file.txt . |
| Sync directory | rsync -avz dir/ user@host:/path/ |
| Local tunnel | ssh -L 8080:localhost:80 user@host |
SSH Key Management
Generate Keys
# Ed25519 (recommended — fast, secure, short keys)
ssh-keygen -t ed25519 -C "user@hostname"
# Ed25519 with custom filename
ssh-keygen -t ed25519 -f ~/.ssh/id_project -C "user@hostname"
# RSA 4096-bit (for legacy systems that don't support Ed25519)
ssh-keygen -t rsa -b 4096 -C "user@hostname"
# Generate without passphrase (for automation only)
ssh-keygen -t ed25519 -f ~/.ssh/id_automation -N ""
# Change passphrase on existing key
ssh-keygen -p -f ~/.ssh/id_ed25519
# View key fingerprint
ssh-keygen -lf ~/.ssh/id_ed25519.pub
# View key in different format
ssh-keygen -lf ~/.ssh/id_ed25519.pub -E md5
Deploy Public Key
# Copy public key to remote server (recommended)
ssh-copy-id user@host
# Copy specific key
ssh-copy-id -i ~/.ssh/id_project.pub user@host
# Copy to non-standard port
ssh-copy-id -p 2222 user@host
# Manual method (when ssh-copy-id is unavailable)
cat ~/.ssh/id_ed25519.pub | ssh user@host 'mkdir -p ~/.ssh && cat >> ~/.ssh/authorized_keys && chmod 600 ~/.ssh/authorized_keys'
SSH Agent
# Start agent (if not running)
eval "$(ssh-agent -s)"
# Add key to agent
ssh-add ~/.ssh/id_ed25519
# Add key with timeout (auto-remove after 1 hour)
ssh-add -t 3600 ~/.ssh/id_ed25519
# List keys in agent
ssh-add -l
# Remove specific key
ssh-add -d ~/.ssh/id_ed25519
# Remove all keys
ssh-add -D
# macOS: add key to Keychain
ssh-add --apple-use-keychain ~/.ssh/id_ed25519
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 462 lines · 72 tokens per session scan D fcc1a89c3536
ssh-remote is a skill published in the GitHub repository bug-ops/zeph (65 stars, last pushed today), licensed MIT. It adds 72 tokens to every session and 3,185 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it D with 3 findings (asks for root, reaches for credential files, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
dnanexus-integration
DNAnexus cloud genomics platform. Build apps/applets, manage data (upload/download), dxpy Python SDK, run workflows, FASTQ/BAM/VCF, for genomics pipeline development and execution.
latchbio-integration
Latch platform for bioinformatics workflows. Build pipelines with Latch SDK, @workflow/@task decorators, deploy serverless workflows, LatchFile/LatchDir, Nextflow/Snakemake integration.
lambda-gpu-cloud
Safely inspect and operate Lambda Cloud GPU instances through the documented Cloud API and SSH, with explicit approval before billable or destructive actions.
tensorpool-gpu-cloud
Safely inspect and operate TensorPool GPU clusters and jobs using the current tp CLI, with explicit approval before any billable or destructive action.
runpod-gpu-cloud
Safely inspect and operate RunPod resources with runpodctl, live product data, and explicit approval before paid or destructive actions.
vast-ai-gpu-cloud
Safely inspect and operate Vast.ai marketplace instances with the vastai CLI, live offer data, and explicit approval before paid or destructive actions.