Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Knuckles-Team/tunnel-manager --skill tunnel-manager-remote-executiongit clone --depth 1 https://github.com/Knuckles-Team/tunnel-managerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/knuckles-team/tunnel-manager/tunnel-manager-remote-execution)<a href="https://agentmods.dev/skills/knuckles-team/tunnel-manager/tunnel-manager-remote-execution"><img src="https://agentmods.dev/badge/skills/knuckles-team/tunnel-manager/tunnel-manager-remote-execution/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/knuckles-team/tunnel-manager/tunnel-manager-remote-execution"><img src="https://agentmods.dev/badge/skills/knuckles-team/tunnel-manager/tunnel-manager-remote-execution.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00120 | $0.01084 |
| Opus 5 | $0.00060 | $0.00542 |
| Sonnet 5 | $0.00024 | $0.00217 |
| Haiku 4.5 | $0.00012 | $0.00108 |
Grade A, and why
tunnel-manager-remote-execution scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 90 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Tunnel Manager — Remote Execution
Execute commands and move files over SSH via the tunnel-manager MCP server —
either against one host or fanned out across an inventory group.
When to use
- Run a shell command on a single host and read stdout/stderr.
- Send or receive a file to/from a host (SFTP).
- Run the same command across every host in a group (optionally in parallel).
- Check SSH reachability or verify key auth before relying on a host.
When NOT to use
- Registering / removing host aliases →
tunnel-manager-host-inventory. - Passwordless key setup, key rotation, mesh, or security audits →
tunnel-manager-ssh-hardening. - Long-running orchestration you want to track → pair with
tm_operations.
Prerequisites & environment
Connect via the mcp-client skill against the tunnel-manager MCP server.
| Variable | Required | Notes |
|---|---|---|
TUNNEL_REMOTE_HOST / TUNNEL_USERNAME |
optional | Defaults for single-host tm_remote |
TUNNEL_IDENTITY_FILE |
optional | Default private key path |
TUNNEL_INVENTORY / TUNNEL_INVENTORY_GROUP |
optional | Group ops with tm_inventory |
TUNNEL_PARALLEL / TUNNEL_MAX_THREADS |
optional | Parallel fan-out controls |
Tools & actions
| Condensed tool | Actions |
|---|---|
tm_remote |
run_command, send_file, receive_file, check_ssh, test_key_auth, remove_host_key |
tm_inventory |
run_command, send_file, receive_file (group fan-out) |
Key parameters
host,user,port,id_file— single-host connection (orpassword).cmd— the shell command forrun_command.lpath/rpath— local / remote paths forsend_file/receive_file.group,parallel,max_threads— fan-out controls ontm_inventory.timeout— per-command timeout in seconds (default 60).
Recipes
Run a command on one host:
{"action": "run_command", "host": "rw710", "user": "genius", "id_file": "~/.ssh/id_shared", "cmd": "uptime"}
Copy a file up to a host:
{"action": "send_file", "host": "rw710", "user": "genius", "lpath": "./deploy.sh", "rpath": "/tmp/deploy.sh"}
Verify a host is reachable before using it:
{"action": "check_ssh", "host": "rw710", "user": "genius", "id_file": "~/.ssh/id_shared"}
Fan a command across a whole group (tm_inventory), in parallel:
{"action": "run_command", "group": "homelab", "cmd": "df -h /", "parallel": true, "max_threads": 6}
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 90 lines · 120 tokens per session scan A 2e1180e82ef4
tunnel-manager-remote-execution is a skill published in the GitHub repository Knuckles-Team/tunnel-manager (2 stars, last pushed 12d ago), licensed MIT. It adds 120 tokens to every session and 1,084 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
memory-audit
An entry point for reviewing and maintaining an AI agent's stored memories. It describes how to remove repetition, preserve useful reasoning, and update memories when old conclusions no longer fit.
memory-audit-discoverability
A review guide for checking whether stored memories can be found at the right time. It focuses on where memories are attached, when they are triggered, whether aliases are missing, and whether a parent has too many children.
memory-audit-pattern-extraction
A method for investigating repeated mistakes by comparing related memories and checking whether an earlier reminder failed. It looks at where the reminder was stored, when it was created, and whether it was strong enough to prevent the mistake.
directory-based-skill
A skill loaded from a directory structure with SKILL.md frontmatter, plus file-based and URL-based instruction sources.
huawei-cloud-ascend-remote-connect
Provides temporary SSH remote connection for Huawei Cloud Ascend devices with dynamic host/port/user/password input (in-memory only), disk management, NPU monitoring, container management, security auditing and log analysis; sensitive operations require user confirmation before execution Use this skillthis skill to…
repo-cve-findings
Resolve a GitHub repository in the security graph and list the CVEs recorded against it, confirming from the graph's dependency data which vulnerable versions are actually installed. Produces the finding set that a reachability review then judges against the source.