ssh-remote-connection

Savant verdict: Review advised

Security analysis or source-hub review identified patterns requiring attention.

Live evaluation

Not evaluated yet. Workspaces can request a live evaluation.

Security assessment

Scan pending.

Structure

• Ships 1 executable scriptscripts/connect.sh. Review what they do before enabling the skill for agents with tool access.
• No license declaredConfirm you may reuse this skill before importing it into your repository.
• The source hub's security checks flagged this skillRunlayer: warn (4/4 files flagged)

SKILL.md

---
name: ssh-remote-connection
description: SSH connection to remote servers. Use when you need to execute commands on a remote server, check logs, restart services, or manage Docker containers.
---

# SSH Remote Connection

Universal skill for connecting to remote servers via SSH.

## Usage

```bash
# Interactive shell
scripts/connect.sh

# Run command directly
scripts/connect.sh "docker compose logs backend --tail 50"
```

## Setup

### For Claude Code (local)

1. Copy config template:
   ```bash
   cp config/.env.example config/.env
   ```

2. Fill in `config/.env` with actual values

   Key-based authentication:
   ```bash
   SSH_HOST=your-server.example.com
   SSH_USER=ubuntu
   SSH_AUTH_METHOD=key
   SSH_KEY_PATH=/absolute/path/to/private/key
   SSH_KEY_PASSWORD=
   SERVER_PROJECT_PATH=/path/to/project
   ```

   Password-based authentication:
   ```bash
   SSH_HOST=your-server.example.com
   SSH_USER=ubuntu
   SSH_AUTH_METHOD=password
   SSH_PASSWORD='your account password'
   SERVER_PROJECT_PATH=/path/to/project
   ```

3. Make script executable:
   ```bash
   chmod +x scripts/connect.sh
   ```

### For Cloud Runtime

Set environment variables in your cloud configuration:
- `SSH_HOST` — server hostname or IP
- `SSH_USER` — SSH username
- `SSH_PORT` — SSH port (optional)
- `SSH_AUTH_METHOD` — `auto`, `key`, or `password` (optional, defaults to `auto`)
- `SSH_KEY_PATH` — path to private key for key authentication
- `SSH_KEY_PASSWORD` — key passphrase (optional)
- `SSH_PASSWORD` — SSH account password for password authentication
- `SERVER_PROJECT_PATH` — project directory on server

For password authentication, the local runtime must have either `sshpass` or `expect`.
If the host key is not trusted yet, connect once manually or add the host to `known_hosts`
before running non-interactive commands.

## Important Notes

- **Git operations**: Do NOT run `git pull` on the server. User will handle git sync manually.
- **Code location**: Code is in a private repo, changes must be pushed first then pulled by user.
- **Docker**: Use `docker compose` (not `docker-compose`) on the server.

## Example Commands

```bash
# View logs
scripts/connect.sh "docker compose logs backend --tail 100"

# Restart service
scripts/connect.sh "docker compose restart backend"

# Rebuild and restart
scripts/connect.sh "docker compose build backend && docker compose up -d backend"

# Check status
scripts/connect.sh "docker compose ps"
```