Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/gebruder/wirken/sshnpx skills add gebruder/wirken --skill sshgit clone --depth 1 https://github.com/gebruder/wirkenWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00008 | $0.00273 |
| Opus 5 | $0.00004 | $0.00137 |
| Sonnet 5 | $0.00002 | $0.00055 |
| Haiku 4.5 | $0.00001 | $0.00027 |
Grade E, and why
ssh scanned grade E with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Enumerates the file system for secretshighData exfiltration
Searching home directories for .env, .ssh, .aws or credential files is reconnaissance for credential theft.
- List keys: `ls -la ~/.ssh/` Reaches for credential fileshighPrivilege escalation
SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.
- Show public key: `cat ~/.ssh/id_ed25519.pub` What it actually says
SSH
Manage SSH keys and connections.
Key management
- List keys:
ls -la ~/.ssh/ - Generate key:
ssh-keygen -t ed25519 -C "comment" - Show public key:
cat ~/.ssh/id_ed25519.pub - Test connection:
ssh -T [email protected]
Config
- View:
cat ~/.ssh/config - List known hosts:
cat ~/.ssh/known_hosts | wc -l
Remote operations
- Connect:
ssh user@host - Run command:
ssh user@host "command" - Copy file to remote:
scp file.txt user@host:/path/ - Copy from remote:
scp user@host:/path/file.txt . - Port forward:
ssh -L 8080:localhost:80 user@host
Tips
- Use
ssh-addto add keys to the agent - Check
ssh -v user@hostfor connection debugging
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 46 lines · 8 tokens per session scan E 27b91171e6d5
ssh is a skill published in the GitHub repository gebruder/wirken (169 stars, last pushed 3d ago), licensed MIT. It adds 8 tokens to every session and 273 once invoked, about $0.0000 per session on Opus 5. A static security scan graded it E with 2 findings (enumerates the file system for secrets, reaches for credential files). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
build-ami
Use when building, compiling, or publishing the Nexus Gateway AWS AMI / single-instance appliance (the nexus-ami/ Packer image) and registering it to AWS. Covers the full pipeline (Go cross-compile + UI + Prisma + Packer), the EC2 vCPU-quota trap that makes the default m5.4xlarge fail with VcpuLimitExceeded on fresh…
plano-agent-skills
Best practices for building agents and agentic applications with Plano, including configuration, routing, orchestration, guardrails, observability, and deployment.
defenseclaw-ops
Manage DefenseClaw enterprise security - scan components, manage tool permissions, view alerts, configure guardrails.
release-beta
Publish the next AlphaClaw beta and always update the Railway beta template pin to the exact released beta version.
azure-security-audit
Azure NSG compliance auditing and security posture assessment. CIS Azure Foundations Benchmark rules, effective security rule analysis, orphaned NSG detection. Use when auditing Azure NSGs for CIS compliance, checking for overly permissive rules, or reviewing effective security on NICs.
spec-writing
Spec-writing for Spec-Driven Development (SDD) skill for writing requirement specifications before implementation. Use when starting a new feature, planning work, writing requirements, or designing a component. Trigger keywords: spec, specification, SDD, plan feature, write requirements, design feature, spec-driven…