winkterm-remote

winkterm-remote is a skill for Claude Code from Cznorth/winkterm. It costs 118 tokens per session (1,902 once invoked), scanned A, original, MIT.

A workflow for operating WinkTerm terminals through MCP, its command-line tool, or HTTP. WinkTerm provides local and SSH terminals, where SSH is a way to run commands on another computer securely.

In plain words
What is it for?
Opening and managing local or SSH terminals, running commands, reading output, monitoring long jobs, and transferring files over SSH.
Why use it?
It keeps terminal sessions and long-running commands available across connection methods, including when a network proxy would otherwise time them out.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: mentions CLAUDE.md.

Part of the winkterm-remote plugin — 1 skill shipped together

Good fit Opening and managing local or SSH terminals, running commands, reading output, monitoring long jobs, and transferring files over SSH.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/cznorth/winkterm/winkterm-remote
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Cznorth/winkterm --skill winkterm-remote
Clone the repo
git clone --depth 1 https://github.com/Cznorth/winkterm

Made for: Claude Code.

Or install winkterm-remote, the plugin that ships this one along with the rest of its 1 skill.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for winkterm-remote

README.md
[![agentmods](https://agentmods.dev/badge/skills/cznorth/winkterm/winkterm-remote.svg)](https://agentmods.dev/skills/cznorth/winkterm/winkterm-remote)
Your own site
<a href="https://agentmods.dev/skills/cznorth/winkterm/winkterm-remote"><img src="https://agentmods.dev/badge/skills/cznorth/winkterm/winkterm-remote.svg" alt="Measured on agentmods" height="20"></a>
Per session 118 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,902 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00118 $0.01902
Opus 5 $0.00059 $0.00951
Sonnet 5 $0.00024 $0.00380
Haiku 4.5 $0.00012 $0.00190

Measured 8d ago against content hash e5a792366903, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

winkterm-remote scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -s http://localhost:8000/api/agent/handshake
plugins/winkterm-remote/skills/winkterm-remote/SKILL.md · 146 lines

How it starts

The opening of the file, as written. The whole thing — 146 lines — stays where its author put it; the contents beside it link to each section on GitHub.

WinkTerm Remote Terminal

Operate WinkTerm's terminals over MCP, CLI, or HTTP fallback. The backend keeps a dedicated PTY per terminal; you can open local or SSH terminals, run commands, read output, run managed long commands, and move files over SSH.

Prefer MCP when the client supports it. winkterm-mcp exposes tools such as winkterm_ssh_run, winkterm_exec, winkterm_snapshot, and generic winkterm_call, while reusing the same WebSocket-first transport as the CLI. If MCP is unavailable, use the CLI. Both carry the agent surface over one WebSocket with a 15s application-level heartbeat, so long commands (installs, builds, dumps) survive a reverse proxy's default ~60s idle read-timeout. CLI calls print live progress frames to stderr as remote terminal output arrives. MCP receives the same progress frames underneath, but the current MCP tools collect them and return {result, progress} only when the tool call finishes; do not assume MCP clients display remote terminal output live. When live human monitoring matters, use the CLI or subscribe to terminal.stream. When the WebSocket is unavailable they transparently fall back to the HTTP API.

Important: WebSocket keepalive prevents connection timeouts; it does not guarantee that the current agent runtime can see CLI stderr/progress while a process is still running. For long tasks, do not blindly wait on one huge timeout. Start the work, then actively observe it with run_wait or snapshots. Background work still needs inspection so prompts, errors, and stuck installs are caught early.

# Install from npm (no clone needed):
npx winkterm help          # run without installing; or: npm install -g winkterm

# Store credentials once (-> ~/.winkterm/cli.json, mode 0600) so later commands
# carry no token on the command line and a screenshot can't leak it:
npx winkterm login --base-url https://your-backend --token <bearer-token>

# MCP-capable clients can run:
npx -y winkterm mcp

# Generic call (covers every method) — long task stays alive over WS:
npx winkterm exec <terminal_id> "sleep 300 && echo done"
npx winkterm run <terminal_id> "docker build ."

This skill is a thin bootstrap. The authoritative, always-current reference (full CLI method map + HTTP fallback surface) lives on the backend at GET /api/agent/skill.md — fetch it on first use so you have the exact surface for the version you are talking to.

Read the full file on GitHub · 146 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 146 lines · 118 tokens per session scan A e5a792366903

Subscribe to this mod's changes

winkterm-remote is a skill published in the GitHub repository Cznorth/winkterm (20 stars, last pushed 1mo ago), licensed MIT. It adds 118 tokens to every session and 1,902 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

glyph

Render an answer as ASCII art plus semantic emojis inline, right now, with no setup questions. Use for a fast visual take on status, comparisons, trade-offs, architecture, or any ad-hoc 'show me X visually' ask. For a full multi-artifact plan playground, use visualize-plan instead.

yonatangross/orchestkit · 64 tokens

tether

Observe and operate durable workloads and reviewed Mission Control groups through Tether's public surfaces without depending on tmux or Herdr internals.

moneycaringcoder/herdr-tether · 30 tokens

ptywright-testing

Build, run, record, replay, debug, and maintain deterministic terminal, TUI, PTY cassette, and browser-terminal agent regression tests with ptywright. Use when an agent needs to drive CLI/TUI apps, create ptywright scripts, configure ptywright.config., record or replay PTY output, solidify browser terminal agent flows…

kingsword09/ptywright · 93 tokens

deepagents-thread-inspector

Inspect and explain conversations in the local Deep Agents Code SQLite session store. Use as a fallback when LangSmith trace tooling is unavailable, for offline or untraced sessions, or when asked to identify or summarize a local dcode thread, inspect checkpoint metadata, list recent local threads, or parse…

langchain-ai/deepagents · 82 tokens

computer-use

OS/window-level inspection and input in visible local app windows through orca computer: native apps, external browser windows (Chrome, Edge, Safari), and app webviews. Not for Orca's embedded browser (use orca-cli) or page-only automation (use Playwright or CDP).

stablyai/orca · 62 tokens

orca-emulator-android

Android device and emulator control from inside Orca over adb, with the live device view in Orca's emulator pane. Use when driving an adb-connected emulator or phone on Windows, Linux, or macOS: booting AVDs, taps, swipes, typing, hardware buttons, rotation, app install and launch, runtime permissions, the…

stablyai/orca · 102 tokens