Getting it into your agent
This one installs as part of its plugin. Adding the marketplace and installing the plugin brings it with everything else the plugin ships.
/plugin marketplace add southlab-ai/Claude-Plugin-Marketplace/plugin install claude-sentinelWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/southlab-ai/claude-plugin-marketplace/vps-setup)<a href="https://agentmods.dev/skills/southlab-ai/claude-plugin-marketplace/vps-setup"><img src="https://agentmods.dev/badge/skills/southlab-ai/claude-plugin-marketplace/vps-setup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/southlab-ai/claude-plugin-marketplace/vps-setup"><img src="https://agentmods.dev/badge/skills/southlab-ai/claude-plugin-marketplace/vps-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00086 | $0.01531 |
| Opus 5 | $0.00043 | $0.00766 |
| Sonnet 5 | $0.00017 | $0.00306 |
| Haiku 4.5 | $0.00009 | $0.00153 |
Grade A, and why
vps-setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 221 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/sentinel:vps-setup — Install Claude Code on a VPS
Guided walkthrough to install and authenticate Claude Code on a remote server via SSH. The user runs commands from their local machine (Git Bash, Terminal, etc.) connecting to the VPS. Claude guides each step and verifies before moving on.
Arguments passed: $ARGUMENTS
Prerequisites to confirm with user
Before starting, collect:
- VPS IP address — ask if not provided
- SSH access — ask which user they connect as (root? ubuntu? other?)
- SSH key location — default
~/.ssh/id_ed25519, ask to confirm - Operating system — assume Ubuntu/Debian unless stated otherwise
Test connectivity first:
ssh -i <key_path> <user>@<ip> "echo 'Connection OK'"
If this fails, troubleshoot SSH before proceeding.
Step 1: Create a non-root user
Why this is required: Claude Code blocks --dangerously-skip-permissions when running
as root for security reasons. The Telegram gateway needs this flag, so a non-root user
is mandatory — not optional.
If user is already connecting as a non-root user, skip to Step 2.
Guide the user to run these commands on the VPS:
# Connect as root (or current user with sudo)
ssh -i <key_path> root@<ip>
# Create the claude user
sudo adduser claude --disabled-password --gecos ""
sudo usermod -aG sudo claude
# Allow passwordless sudo (needed for service management)
echo "claude ALL=(ALL) NOPASSWD:ALL" | sudo tee /etc/sudoers.d/claude
# Copy SSH key for the new user
sudo mkdir -p /home/claude/.ssh
sudo cp ~/.ssh/authorized_keys /home/claude/.ssh/
sudo chown -R claude:claude /home/claude/.ssh
sudo chmod 700 /home/claude/.ssh
sudo chmod 600 /home/claude/.ssh/authorized_keys
Verify: ssh -i <key_path> claude@<ip> "whoami" should return claude.
Step 2: Install Claude Code CLI
ssh -i <key_path> claude@<ip>
# Install Claude Code (native binary, no Node.js needed)
curl -fsSL https://claude.ai/install.sh | bash
# Add to PATH for current session
export PATH="$HOME/.local/bin:$PATH"
# Verify
claude --version
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 221 lines · 86 tokens per session scan F 2aa63a2a1d5f
vps-setup is a skill published in the GitHub repository southlab-ai/Claude-Plugin-Marketplace (2 stars, last pushed 1mo ago), licensed MIT. It adds 86 tokens to every session and 1,531 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
vast-ai-gpu-cloud
Safely inspect and operate Vast.ai marketplace instances with the vastai CLI, live offer data, and explicit approval before paid or destructive actions.
oma-tf-infra
Infrastructure-as-code specialist for multi-cloud provisioning using Terraform across any provider (AWS, GCP, Azure, Oracle Cloud). Use for terraform plan/apply, state management, compute, databases, storage, networking, IAM, OIDC, cost optimization, policy-as-code, ISO/IEC 42001 AI controls, ISO 22301 continuity, and…
architecture-diagram
Dark-themed SVG architecture/cloud/infra diagrams as HTML.
deploy-gen
Generate deployment configurations (Docker, Kubernetes) for the current project.
cockpit-headless-deploy
Guide or repair a headless Linux AIWG Cockpit plus Agentic Sandbox deployment when host topology, SSH access, service persistence, or runtime readiness must be planned safely.
stack-baseline
The pinned default technology stack for SMB Product-Builder products. One source of truth so the architect, app-scaffolder, auth-engineer, and senior-dev never re-decide the stack per build — they build ON it. Covers framework, ORM/DB, auth, UI, payments/email/SMS, files, jobs, testing, hosting, and observability…