tunnel-manager-remote-execution

tunnel-manager-remote-execution is a skill for Claude Code, Codex from Knuckles-Team/tunnel-manager. It costs 120 tokens per session (1,084 once invoked), scanned A, original, MIT.

A skill for running shell commands and transferring files over SSH, a secure way to access another computer. It can target one host or multiple hosts in an inventory.

In plain words
What is it for?
Use it to run commands, copy files, check SSH reachability, or execute the same operation across a host group.
Why use it?
It lets an agent perform remote operations without requiring the developer to connect to each machine manually.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it to run commands, copy files, check SSH reachability, or execute the same operation across a host group.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/knuckles-team/tunnel-manager/tunnel-manager-remote-execution
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Knuckles-Team/tunnel-manager --skill tunnel-manager-remote-execution
Clone the repo
git clone --depth 1 https://github.com/Knuckles-Team/tunnel-manager

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for tunnel-manager-remote-execution

README.md
[![agentmods](https://agentmods.dev/badge/skills/knuckles-team/tunnel-manager/tunnel-manager-remote-execution/github.svg)](https://agentmods.dev/skills/knuckles-team/tunnel-manager/tunnel-manager-remote-execution)
Your own site
<a href="https://agentmods.dev/skills/knuckles-team/tunnel-manager/tunnel-manager-remote-execution"><img src="https://agentmods.dev/badge/skills/knuckles-team/tunnel-manager/tunnel-manager-remote-execution/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for tunnel-manager-remote-execution

Your own site · 80×15
<a href="https://agentmods.dev/skills/knuckles-team/tunnel-manager/tunnel-manager-remote-execution"><img src="https://agentmods.dev/badge/skills/knuckles-team/tunnel-manager/tunnel-manager-remote-execution.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 120 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,084 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00120 $0.01084
Opus 5 $0.00060 $0.00542
Sonnet 5 $0.00024 $0.00217
Haiku 4.5 $0.00012 $0.00108

Measured 9d ago against content hash 2e1180e82ef4, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

tunnel-manager-remote-execution scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

tunnel_manager/skills/tunnel-manager-remote-execution/SKILL.md · 90 lines

How it starts

The opening of the file, as written. The whole thing — 90 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Tunnel Manager — Remote Execution

Execute commands and move files over SSH via the tunnel-manager MCP server — either against one host or fanned out across an inventory group.

When to use

  • Run a shell command on a single host and read stdout/stderr.
  • Send or receive a file to/from a host (SFTP).
  • Run the same command across every host in a group (optionally in parallel).
  • Check SSH reachability or verify key auth before relying on a host.

When NOT to use

  • Registering / removing host aliases → tunnel-manager-host-inventory.
  • Passwordless key setup, key rotation, mesh, or security audits → tunnel-manager-ssh-hardening.
  • Long-running orchestration you want to track → pair with tm_operations.

Prerequisites & environment

Connect via the mcp-client skill against the tunnel-manager MCP server.

Variable Required Notes
TUNNEL_REMOTE_HOST / TUNNEL_USERNAME optional Defaults for single-host tm_remote
TUNNEL_IDENTITY_FILE optional Default private key path
TUNNEL_INVENTORY / TUNNEL_INVENTORY_GROUP optional Group ops with tm_inventory
TUNNEL_PARALLEL / TUNNEL_MAX_THREADS optional Parallel fan-out controls

Tools & actions

Condensed tool Actions
tm_remote run_command, send_file, receive_file, check_ssh, test_key_auth, remove_host_key
tm_inventory run_command, send_file, receive_file (group fan-out)

Key parameters

  • host, user, port, id_file — single-host connection (or password).
  • cmd — the shell command for run_command.
  • lpath / rpath — local / remote paths for send_file / receive_file.
  • group, parallel, max_threads — fan-out controls on tm_inventory.
  • timeout — per-command timeout in seconds (default 60).

Recipes

Run a command on one host:

{"action": "run_command", "host": "rw710", "user": "genius", "id_file": "~/.ssh/id_shared", "cmd": "uptime"}

Copy a file up to a host:

{"action": "send_file", "host": "rw710", "user": "genius", "lpath": "./deploy.sh", "rpath": "/tmp/deploy.sh"}

Verify a host is reachable before using it:

{"action": "check_ssh", "host": "rw710", "user": "genius", "id_file": "~/.ssh/id_shared"}

Fan a command across a whole group (tm_inventory), in parallel:

{"action": "run_command", "group": "homelab", "cmd": "df -h /", "parallel": true, "max_threads": 6}

Read the full file on GitHub · 90 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 90 lines · 120 tokens per session scan A 2e1180e82ef4

Subscribe to this mod's changes

tunnel-manager-remote-execution is a skill published in the GitHub repository Knuckles-Team/tunnel-manager (2 stars, last pushed 12d ago), licensed MIT. It adds 120 tokens to every session and 1,084 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

memory-audit

An entry point for reviewing and maintaining an AI agent's stored memories. It describes how to remove repetition, preserve useful reasoning, and update memories when old conclusions no longer fit.

Dataojitori/nocturne_memory · 31 tokens

memory-audit-discoverability

A review guide for checking whether stored memories can be found at the right time. It focuses on where memories are attached, when they are triggered, whether aliases are missing, and whether a parent has too many children.

Dataojitori/nocturne_memory · 35 tokens

memory-audit-pattern-extraction

A method for investigating repeated mistakes by comparing related memories and checking whether an earlier reminder failed. It looks at where the reminder was stored, when it was created, and whether it was strong enough to prevent the mistake.

Dataojitori/nocturne_memory · 48 tokens

directory-based-skill

A skill loaded from a directory structure with SKILL.md frontmatter, plus file-based and URL-based instruction sources.

agentfront/frontmcp · 28 tokens

huawei-cloud-ascend-remote-connect

Provides temporary SSH remote connection for Huawei Cloud Ascend devices with dynamic host/port/user/password input (in-memory only), disk management, NPU monitoring, container management, security auditing and log analysis; sensitive operations require user confirmation before execution Use this skillthis skill to…

huaweicloud/huaweicloud-skills · 115 tokens

repo-cve-findings

Resolve a GitHub repository in the security graph and list the CVEs recorded against it, confirming from the graph's dependency data which vulnerable versions are actually installed. Produces the finding set that a reachability review then judges against the source.

mappedsky/seizu · 54 tokens