Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add daidaiJ/2native-ssh-mcp --skill 2native-ssh-mcp-helpergit clone --depth 1 https://github.com/daidaiJ/2native-ssh-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/daidaij/2native-ssh-mcp/2native-ssh-mcp-helper)<a href="https://agentmods.dev/skills/daidaij/2native-ssh-mcp/2native-ssh-mcp-helper"><img src="https://agentmods.dev/badge/skills/daidaij/2native-ssh-mcp/2native-ssh-mcp-helper.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00106 | $0.02236 |
| Opus 5 | $0.00053 | $0.01118 |
| Sonnet 5 | $0.00021 | $0.00447 |
| Haiku 4.5 | $0.00011 | $0.00224 |
Grade D, and why
2native-ssh-mcp-helper scanned grade D with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- Unix: `chmod 600 config.json && chmod 700 $(dirname config.json)` Reaches for credential fileshighPrivilege escalation
SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.
- `privateKey` → `"privateKey": "~/.ssh/id_ed25519"`, optional `"passphrase": "${SSH_MCP_PASSPHRASE}"` How it starts
The opening of the file, as written. The whole thing — 174 lines — stays where its author put it; the contents beside it link to each section on GitHub.
2native-ssh-mcp-helper
Interactive wizard for 2native-ssh-mcp (Go SSH MCP server). Produces a locked config.json plus an MCP client snippet. Never paste passwords into MCP client args — use env refs in the config file.
When to use
- Install or configure 2native-ssh-mcp for Cursor / Claude Code / Cline / Continue
- Add another SSH host to an existing setup
- User asks how to write
mcp.jsonfor this project
When not to use
- User wants to change server source code → edit the repo directly
- User only wants to run a remote command → use existing MCP tools after setup
Workflow
-
Locate binary
- Prefer a release binary:
2native-ssh-mcp/2native-ssh-mcp.exeon PATH or from GitHub Releases - Or build:
go build -o 2native-ssh-mcp .in the repo root - Confirm:
2native-ssh-mcp --version
- Prefer a release binary:
-
Choose MCP client (AskQuestion if available)
Client Config file Cursor ~/.cursor/mcp.jsonClaude Code (global) ~/.claude.json→mcpServersClaude Code (project) <project>/.mcp.jsonOther Ask user for path -
Single vs multi host (AskQuestion)
- Single: one entry in
config.jsonkeyed"default"or a custom name - Multi: object with multiple keys (
dev,prod, …) + optionalaliases
- Single: one entry in
-
Auth (AskQuestion)
password→ config"password": "${SSH_MCP_PASSWORD}", set env in MCP clientprivateKey→"privateKey": "~/.ssh/id_ed25519", optional"passphrase": "${SSH_MCP_PASSPHRASE}"ssh-config alias→"host"in config matches~/.ssh/configHost; CLI--host aliasonly for single-host modeagent→"agent": "/path/to/socket"or"pageant"on Windows2FA→ add"tryKeyboard": true, OTP viaSSH_MCP_2FA_CODEenv
-
Security prompts (AskQuestion yes/no each)
- Command whitelist regexes (recommended for prod)
- Command blacklist
allowedLocalPaths/allowedRemotePaths(+localPathMode:cwddefault,list= onlyallowedLocalPaths,any= unrestricted)- Server metadata:
description,business,aliases,notesfor list-servers - Bastion:
"transportMode": "shell"(no SFTP on shell mode) - Host key check:
"hostKeyCheck"— defaultaccept-new(records unknown keys, rejects changed ones); usestrictfor fixed hosts,nonefor dynamic IP / frequently reimaged machines.known_hostsand its directory are auto-created; override path with"knownHostsFile"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago Changed · +1 lines bd4d3fec8ee0
- 7d ago First seen · 173 lines · 106 tokens per session scan D 8f24c4af1702
2native-ssh-mcp-helper is a skill published in the GitHub repository daidaiJ/2native-ssh-mcp (0 stars, last pushed today), licensed ISC. It adds 106 tokens to every session and 2,236 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it D with 2 findings (asks for root, reaches for credential files). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
code-review
Structured code review prompt with language and focus area.
explain-error
Explain an error message with optional context.
incident-triage
Triage a network incident from symptoms to a suspected layer.
productplan-pm
Generates comprehensive workflows for product managers to manage roadmaps, OKRs, ideas, and launches in ProductPlan. Use when doing day-to-day product management work, updating feature timelines, tracking objectives, or triaging customer feedback.
productplan-workflows
Generates step-by-step workflows for managing ProductPlan roadmaps, OKRs, ideas, and launches via MCP server tools. Use when working with ProductPlan data, planning features, tracking objectives, or coordinating product launches.
gopls-mcp
Semantic Go code analysis using gopls — type-aware definitions, references, implementations, call hierarchy, dependency graphs, and rename previews. Use these tools for semantic Go tasks; never fall back to grep — gopls sees types, scopes, and interfaces that text search misses.