agentmods.dev

infra-system-env-ops

infra-system-env-ops is a skill for Claude Code, Codex from seed-forge/harness-ai-kit. It costs 108 tokens per session (2,586 once invoked), scanned A, original, Apache-2.0.

A system-operations guide for network port forwarding and service reliability. It covers forwarding traffic through Linux, Windows, or SSH, plus watchdogs that monitor services and help recover from crashes.

In plain words
What is it for?
Use it to plan TCP or UDP forwarding, SSH tunnels, firewall rules, port proxies, Monit watchdogs, crash recovery, and system resource monitoring.
Why use it?
It turns an unclear connectivity or service-recovery request into the information, commands, checks, persistence method, and rollback steps needed to handle it safely.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

not rated 22repo +1 8d ago A scan SkillSpector: warn 108 tokens original Apache-2.0

Good fit Use it to plan TCP or UDP forwarding, SSH tunnels, firewall rules, port proxies, Monit watchdogs, crash recovery, and system resource monitoring.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/seed-forge/harness-ai-kit/infra-system-env-ops
View source ↗ seed-forge/harness-ai-kit pypi.org
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add seed-forge/harness-ai-kit --skill infra-system-env-ops
Clone the repo
git clone --depth 1 https://github.com/seed-forge/harness-ai-kit

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for infra-system-env-ops

README.md
[![agentmods](https://agentmods.dev/badge/skills/seed-forge/harness-ai-kit/infra-system-env-ops/github.svg)](https://agentmods.dev/skills/seed-forge/harness-ai-kit/infra-system-env-ops)
Your own site
<a href="https://agentmods.dev/skills/seed-forge/harness-ai-kit/infra-system-env-ops"><img src="https://agentmods.dev/badge/skills/seed-forge/harness-ai-kit/infra-system-env-ops/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for infra-system-env-ops

Your own site · 80×15
<a href="https://agentmods.dev/skills/seed-forge/harness-ai-kit/infra-system-env-ops"><img src="https://agentmods.dev/badge/skills/seed-forge/harness-ai-kit/infra-system-env-ops.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 108 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,586 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 2 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium Rogue Agent · line 175
    Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
    Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00108 $0.02586
Opus 5 $0.00054 $0.01293
Sonnet 5 $0.00022 $0.00517
Haiku 4.5 $0.00011 $0.00259

Measured 9d ago against content hash 231778d94f55, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

infra-system-env-ops scanned grade A with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

subprocess.run(["curl", "-s", "-X", "POST", "-H", "Content-Type: application/json",

Runs shell commandslowCapability

Expected in a hook, worth knowing in a rule or an instructions file.

subprocess.run(["curl", "-s", "-X", "POST", "-H", "Content-Type: application/json",
skills/infra-system-env-ops/SKILL.md · 221 lines

How it starts

The opening of the file, as written. The whole thing — 221 lines — stays where its author put it; the contents beside it link to each section on GitHub.

infra-system-env-ops

系统环境运维统一入口。v1 聚焦端口联通与转发（iptables/firewalld/portproxy/SSH tunnel），v2 扩展 Monit 统一看门狗、服务崩溃自愈和系统资源监控。

你要完成的事

  1. 先在当前笔记库中查找已有端口转发笔记、历史命令或同网段案例。
  2. 把用户需求整理成结构化信息：
    • 转发机 IP
    • 对外端口
    • 目标内网 IP
    • 目标端口
    • 协议 TCP / UDP / both
    • 操作系统与网络层：Linux、Windows、SSH tunnel、云安全组 / ACL
  3. 输出四段式结果：
    • 执行命令
    • 校验命令
    • 持久化方式
    • 回滚命令
  4. 若用户明确要求代执行，再根据当前工具链决定是给命令、SSH 执行，还是只做变更方案。

专项诊断技能（diag-* namespace，自包含全链 Runbook；本 skill 发现端口不通症状时委派）：

  • diag-network-port-unreach：端口不可达全链诊断——DNS → TCP → 防火墙 → 监听 → 路由。

默认判断

  • 用户未说明协议时，默认按 TCP 处理，但要显式写出“若业务还需 UDP，再补规则”。
  • 用户只给了公网机和目标机端口，默认理解为同端口转发。
  • 若目标服务不是本机而是内网地址，优先考虑 DNAT + FORWARD + POSTROUTING(MASQUERADE)。
  • 若系统是 Ubuntu 且明确使用 ufw，补 ufw route allow 思路；若是 CentOS/RHEL 且明确使用 firewalld，补 firewall-cmd 或 direct 规则思路。
  • 若系统类型未知，先要求确认 OS；只需要临时联通时，优先给 SSH tunnel 方案；明确是 Linux 才给 iptables / firewalld；明确是 Windows 才给 portproxy / WinNAT。

工作流程

第一步：复用现有知识

优先搜索这些关键词：

  • 端口转发
  • iptables
  • DNAT
  • MASQUERADE
  • firewall-cmd
  • portproxy
  • WinNAT
  • ssh -L
  • ssh -R
  • 目标 IP 或端口

如果笔记库已有近似案例，优先沿用原有命令风格。

第二步：组装最小可用方案

对典型公网机 A 转发到内网机 B 的 TCP 端口，默认输出这几类命令：

  1. 开启 IP 转发
  2. PREROUTING 的 DNAT
  3. FORWARD 正向放行
  4. FORWARD 回程放行，优先使用 conntrack --ctstate ESTABLISHED,RELATED
  5. POSTROUTING 的 MASQUERADE
  6. 必要时补 INPUT 放行入口端口

若需 UDP，单独追加 UDP 版本，不与 TCP 混写成含糊描述。

Windows 场景默认区分两类：

  1. 本机监听并转发到目标地址：优先说明 netsh interface portproxy 只适合 TCP。
  2. NAT/容器/虚拟网络转发：优先说明 WinNAT / Hyper-V / Docker 网络的适用条件。

临时联通场景优先输出 SSH tunnel：

  1. 本地访问远端内网服务：ssh -L <local_port>:<target_host>:<target_port> <jump_host>。
  2. 远端反向暴露本地服务：ssh -R <remote_port>:<target_host>:<target_port> <jump_host>。

第三步：始终附带校验

至少给出：

  • sysctl net.ipv4.ip_forward
  • iptables -t nat -vnL
  • iptables -vnL FORWARD
  • ss -lntp | grep <port> 或目标服务连通性检查
  • 从转发机测试 telnet / nc 到目标 IP:port 的建议
  • Windows 场景补 netsh interface portproxy show all、Get-NetNat 或 Test-NetConnection
  • SSH tunnel 场景补本地端口监听、目标端口探测和 tunnel 进程确认

Read the full file on GitHub · 221 lines

Files

What ships with it

8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 221 lines · 108 tokens per session scan A 231778d94f55

Subscribe to this mod's changes

infra-system-env-ops is a skill published in the GitHub repository seed-forge/harness-ai-kit (22 stars, last pushed 8d ago), licensed Apache-2.0. It adds 108 tokens to every session and 2,586 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 2 findings (makes network calls, runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Claude CodeDevOps and cloudagent-skillsai-agentsclaude-skillscodexcursor
Related

Other skills, from other repositories

extract-source-sample

Given the path to a finished content-goose ad-run folder, extract everything that defines that ad — recipe shot list, VO script, characters, voices, world, atom-skills, master mp4 — and emit a source-sample.json in the exact shape the upload-ad-sample skill writes to the Goose Ads library. Also links every character…

gooseworks-ai/goose-skills · 160 tokens

create-video-seedance-2-fal

Generate a single 4-15s vertical video clip with ByteDance Seedance 2.0 reference-to-video via fal.ai. Multi-image reference (avatar + product + setting), native lip-synced VO + ambient audio (generate-audio on by default), internal multi-cut handling within one render. Routes through the GooseWorks FAL proxy (bills…

gooseworks-ai/goose-skills · 117 tokens

comprehensive-enrichment

Enrich any person or company from any identifier — email, name, LinkedIn URL, domain, company name, Twitter/X handle. Use when asked to enrich, look up, or research a lead, contact, person, or company.

gooseworks-ai/goose-skills · 53 tokens

google-search-ads-builder

End-to-end Google Search Ads campaign builder. Performs deep keyword research (competitor SEO, review language mining, Reddit/HN community terminology, site audit), builds keyword architecture with funnel mapping and intent classification, creates ad group structure, generates headline/description variants, builds…

gooseworks-ai/goose-skills · 79 tokens

create-workflow-diagram

Create FigJam/Miro-style workflow diagrams as high-quality PNG images from plain-text workflow descriptions. Renders beautiful HTML diagrams with connected nodes, arrows, and labels, then screenshots them for sharing.

gooseworks-ai/goose-skills · 45 tokens

inbound-lead-qualification

Qualifies inbound leads against full ICP criteria — company size, industry, use case fit, role/seniority of the person. Checks CRM and existing customer base for duplicates and existing relationships. Outputs a scored CSV with qualification status, reasoning, and pipeline overlap flags. Tool-agnostic — works with any…

gooseworks-ai/goose-skills · 77 tokens