skupper-linux-two-site

skupper-linux-two-site is a skill for Claude Code from rhtevan/agentfs. It costs 21 tokens per session (3,852 once invoked), scanned B, a copy of angular-conventions, Apache-2.0.

A workflow for connecting two Linux sites with a Skupper Virtual Application Network using native skrouterd and mutual TLS. The setup verifies the connection with netcat, a command-line network testing tool.

In plain words
What is it for?
Use it to create and test a two-site connection, supplying site names, an SSH host, a namespace, and optional firewall and test settings.
Why use it?
It provides a defined process for creating the sites, securing their link, and checking that traffic can pass between them.

Skill for Claude Code

Written for Claude Code: disable-model-invocation in frontmatter. Also seen: positional $N argument.

Good fit Use it to create and test a two-site connection, supplying site names, an SSH host, a namespace, and optional firewall and test settings.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/rhtevan/agentfs/skupper-linux-two-site
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add rhtevan/agentfs --skill skupper-linux-two-site
Clone the repo
git clone --depth 1 https://github.com/rhtevan/agentfs

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for skupper-linux-two-site

README.md
[![agentmods](https://agentmods.dev/badge/skills/rhtevan/agentfs/skupper-linux-two-site/github.svg)](https://agentmods.dev/skills/rhtevan/agentfs/skupper-linux-two-site)
Your own site
<a href="https://agentmods.dev/skills/rhtevan/agentfs/skupper-linux-two-site"><img src="https://agentmods.dev/badge/skills/rhtevan/agentfs/skupper-linux-two-site/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for skupper-linux-two-site

Your own site · 80×15
<a href="https://agentmods.dev/skills/rhtevan/agentfs/skupper-linux-two-site"><img src="https://agentmods.dev/badge/skills/rhtevan/agentfs/skupper-linux-two-site.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 21 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,852 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin 86% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00021 $0.03852
Opus 5.5 $0.00008 $0.01541
Sonnet 5.5 $0.00004 $0.00770
Haiku 4.5 $0.00002 $0.00385

Measured 1mo ago against content hash e4d8375dc902, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

skupper-linux-two-site scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

The scan reads SKILL.md. This mod also ships 5 executable files (scripts/create-site.sh, scripts/link-sites.sh, scripts/teardown.sh, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

ssh ${REMOTE_SSH_HOST} 'sudo firewall-cmd --zone=${FIREWALL_ZONE} --add-port=45671/tcp --permanent'
Origin

This is a copy

86% identical to angular-conventions — 445 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

skills/skupper-linux-two-site/SKILL.md · 442 lines

How it starts

The opening of the file, as written. The whole thing — 442 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Skupper V2 — Linux/systemd Two-Site Setup

Create a two-site Skupper Virtual Application Network (VAN) on the Linux/systemd platform using native skrouterd, link the sites with mTLS, and verify end-to-end connectivity using nc (netcat).

Parameters

Parameters are defined in the YAML frontmatter under parameters:. Each parameter has binding-cues — phrases the agent should match against user input for semantic binding.

Parameter Required Default Binding Cues Example
LOCAL_SITE_NAME ✅ — "local site", "this host", "edge site" my-local
REMOTE_SITE_NAME ✅ — "remote site", "hub site", "interior site" my-remote
REMOTE_SSH_HOST ✅ — "ssh host", "remote host", "connect to" my-remote-host
NAMESPACE ✅ — "namespace", "ns" playground
FIREWALL_ZONE ❌ auto-detect "firewall zone", "zone" FedoraWorkstation
TEST_PORT ❌ 9090 "test port", "port", "nc port" 9090
TEST_ROUTING_KEY ❌ nc-test "routing key", "service key" nc-test

Agent Binding Rules

  1. Match user input against binding-cues — when the user says "set up a skupper VAN to remote host my-remote-host", bind my-remote-host to REMOTE_SSH_HOST (matches "remote host").

  2. Prompt for missing required parameters — if a required parameter cannot be resolved from context, present a usage hint:

    Missing required parameters. Usage:
      skupper-linux-two-site --local-site <name> --remote-site <name>
        --remote-host <ssh-host> --namespace <ns>
    
  3. Apply defaults for optional parameters — do not prompt for optional parameters unless the user explicitly mentions them.

  4. Confirm bindings before executing — show the resolved parameter table and ask for confirmation:

    Resolved parameters:
      LOCAL_SITE_NAME:  my-local
      REMOTE_SITE_NAME: my-remote
      REMOTE_SSH_HOST:  my-remote-host
      NAMESPACE:        playground
      TEST_PORT:        9090 (default)
    Proceed? [y/n]
    

Read the full file on GitHub · 442 lines

Files

What ships with it

6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 442 lines · 21 tokens per session scan B e4d8375dc902

Subscribe to this mod's changes

skupper-linux-two-site is a skill published in the GitHub repository rhtevan/agentfs (2 stars, last pushed 3d ago), licensed Apache-2.0. It adds 21 tokens to every session and 3,852 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it B with 1 finding (asks for root). It is 86% identical to angular-conventions, differing in 445 lines, and is treated as a copy.

Related

Other skills, from other repositories

local-ai-agents

Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…

microsoft/ai-agents-for-beginners · 200 tokens

systematic-debugging

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.

obra/superpowers · 21 tokens

next-cache-components-adoption

Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…

vercel/next.js · 95 tokens

chat-pet-sprite-creation

Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.

microsoft/vscode · 53 tokens

cpu-profile-analysis

Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…

microsoft/vscode · 71 tokens

insight-error-page

Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…

vercel/next.js · 83 tokens