📦 MCP SSH Manager — 远程服务器管理
v0.1.1一键执行 SSH 命令、上传下载文件、隧道转发、状态监控与备份部署，支持会话复用、工作目录持久化，让远程运维高效可持续。
0· 1.7k·3 当前·4 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
Before installing, verify the skill's source and how the ssh_* tools are provided (is there an external 'mcp-ssh-manager' service you must run?). Review the three included scripts to ensure they don't exfiltrate data or run unexpected network calls. Be aware the skill will write command outputs and host snapshots to ~/.ssh-workdir — inspect those outputs regularly and avoid storing sensitive data there. Confirm how SSH authentication will occur (SSH keys/agent), and consider restricting model-tr...详细分析 ▾
⚠ 用途与能力
The skill's name and description match SSH management. However, the runtime instructions reference custom CLI tools (ssh_execute, ssh_session_start, ssh_upload, etc.) and standard operations (ssh, scp, tar, git, pm2) without declaring any required binaries or credentials. The package contains helper scripts for creating a workdir and logging, but does not provide or install the external 'mcp ssh-manager' server or explain how the ssh_* tools are made available. That mismatch (claims to provide/manage servers but no install, no required binaries, no primary credential) is incoherent.
ℹ 指令范围
SKILL.md instructs the agent to run arbitrary remote commands, create persistent sessions, transfer files, and save command outputs and host snapshots under ~/.ssh-workdir. Those behaviors are expected for an SSH manager, but they also permit capturing and storing arbitrary remote output (which may include secrets), and running any command on remote hosts. The instructions are broad and rely on external tooling and existing SSH auth; they also implicitly assume access to the user's SSH agent/keys.
✓ 安装机制
There is no install spec (instruction-only), which minimizes arbitrary remote downloads. The repo includes three small scripts (create-workdir.sh, log-command.sh, save-status.sh) that manage local logs/workdirs. Not having an install step reduces installer risk, but it increases ambiguity about where the referenced ssh_* tools come from.
ℹ 凭证需求
The skill declares no required environment variables or credentials, yet its functionality implicitly requires SSH authentication (private keys, agent, or credentials) and uses standard system tools. The lack of explicit credential requirements is surprising: the skill will depend on the user's existing SSH keys/config and will store outputs locally. This implicit access should be made explicit so users know what will be used or exposed.
⚠ 持久化与权限
The skill persists command logs, outputs, and status snapshots under ~/.ssh-workdir. Persisting remote outputs locally is reasonable for auditing, but it increases the risk of storing sensitive data (passwords, tokens, config) without explicit safeguards. The skill does not set always:true, but also does not disable model invocation — meaning the agent could invoke these behaviors when the skill is eligible. Combined with the ability to run arbitrary remote commands, that is a noteworthy privilege.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.12026/2/7
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install mcp-ssh-manager
镜像加速npx clawhub@latest install mcp-ssh-manager --registry https://cn.longxiaskill.com