Borrowing it
Nothing to install: this file belongs to garavitgabriel/claude-remote-kit. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/garavitgabriel/claude-remote-kit/main/.claude/skills/remote-setup/SKILL.mdgit clone --depth 1 https://github.com/garavitgabriel/claude-remote-kitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/garavitgabriel/claude-remote-kit/remote-setup)<a href="https://agentmods.dev/skills/garavitgabriel/claude-remote-kit/remote-setup"><img src="https://agentmods.dev/badge/skills/garavitgabriel/claude-remote-kit/remote-setup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/garavitgabriel/claude-remote-kit/remote-setup"><img src="https://agentmods.dev/badge/skills/garavitgabriel/claude-remote-kit/remote-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00180 | $0.04167 |
| Opus 5.5 | $0.00072 | $0.01667 |
| Sonnet 5.5 | $0.00036 | $0.00833 |
| Haiku 4.5 | $0.00018 | $0.00417 |
Grade E, and why
remote-setup scanned grade E with 5 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Subtle steeringmediumPrompt injection
Instructions that bias recommendations or shape behaviour without the user noticing.
nothing. Never tell the user something works that you haven't checked. Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
Missing tmux or jq → offer to install (`brew install tmux jq` / `sudo apt Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
on macOS, `curl -fsSL https://herdr.dev/install.sh | sh` on Linux. Verify Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
executable; `grep statusline ~/.claude/settings.json`. Remind them their Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
on macOS, `curl -fsSL https://herdr.dev/install.sh | sh` on Linux. Verify How it starts
The opening of the file, as written. The whole thing — 303 lines — stays where its author put it; the contents beside it link to each section on GitHub.
remote-setup — guided install of claude-remote-kit
You are guiding a real person through turning this machine into an always-on Claude Code workspace they can reach from their phone or laptop. Be interactive: ask before acting when a step touches their existing config, adapts to hardware you can't see (their phone), or needs an account (Tailscale). One question at a time. Never dump the whole plan and ask "ok?".
Modes (pick from the user's words):
- no args / "set up" → Setup (full flow below)
doctor/ any breakage complaint → Doctor (jump to §Doctor)phone→ §Step 5 onlyusage→ print §Usage guide only
Throughout: resolve the kit repo root — call it $KIT — in this order:
- If this skill file sits inside the cloned repo,
$KITis../../..from it (the folder containinginstall.sh). - If running from the global copy (
~/.claude/skills/remote-setup), read~/.config/claude-remote-kit/kit-path(written byinstall.sh). - Neither → ask where they cloned the repo, or offer to
git clone https://github.com/garavitgabriel/claude-remote-kit.git.
Rules (all modes)
- Back up before overwrite, always.
install.shalready does; if you edit anything by hand (e.g.settings.json), copy it to*.bak-<timestamp>first. - Verify postconditions in the vocabulary of the task, not exit codes.
"Installed tmux" is proven by
tmux -V; "SSH works" is proven by an actual connection or an answering port; a success message from an installer proves nothing. Never tell the user something works that you haven't checked. - Never touch SSH private keys. You may read/write
~/.ssh/config(aliases only) and suggestssh-copy-id; you never generate, move, or read key material without the user explicitly asking. - Things you cannot do — sign in to Tailscale (GUI/browser auth), install apps on their phone, toggle macOS System Settings. For those, give the exact steps, then wait for the user to say done, then verify from your side.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago Changed · +68 lines · +32 tokens per session scan C → E 117954f991e2
- 2mo ago First seen · 235 lines · 148 tokens per session scan C 144e9c9b9f25
remote-setup is a skill published in the GitHub repository garavitgabriel/claude-remote-kit (10 stars, last pushed 11d ago), licensed MIT. It adds 180 tokens to every session and 4,167 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it E with 5 findings (subtle steering, asks for root, downloads and executes remote code). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
Cloudflare
Deploys and manages Cloudflare Workers, Pages, KV, R2, D1, DNS, and Queues with the cf CLI, converts Wrangler projects to cf, and authors MCP servers as Workers; never call cf or wrangler raw for a write. USE WHEN deploy worker, deploy pages, ship worker, push to cloudflare, wrangler deploy, Cloudflare, Pages, DNS…
ccal
Chinese Calendar with Lunar-Solar Conversion.
x-theme
Change terminal command line prompt theme. Globally manage the display style of all x-cmd interactive components. Supports multiple theme vendors: theme, starship, ohmyposh. Dependency: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.
agent-browser
Browser automation via Chrome/Chromium CDP — open, snapshot, click, screenshot. For testing web apps, mobile layouts, and automated interactions without Playwright/Puppeteer.
loop
Schedule recurring tasks with notifications. Triggered by "/loop " to set up periodic monitoring.
app_creator
Create, update, publish, or remove an on-device launcher App when the user explicitly requests a launcher-visible Lua application; not for Skills or generic Lua scripts.