MCP SSH Manager

⬇ 1,244 downloads

High Risk

This skill should be used when the user asks to "run ssh command", "execute on server", "ssh session", "upload file", "download file", "ssh tunnel", "check server status", "monitor server", "deploy files", "backup server", or needs remote server management. This skill emphasizes session reuse, workdir organization, and content persistence for sustainable operations.

H:4 D:4 A:0 C:1

⚠️ Hazard Flags

EXEC PRIVILEGED FS_READ_USER NET_EGRESS_ANY CREDS_FILES PI_WEB

📋 Capabilities

Execution

✅ Shell execution
❌ Code execution
❌ Install dependencies
❌ Persistence
Privilege: admin

Filesystem

❌ Read workspace
❌ Write workspace
✅ Read home
❌ Write home
❌ Read system
❌ Delete

Network

Egress: any
❌ Ingress

Credentials

❌ Environment vars
✅ Credential files
❌ Browser data
❌ Keychain

Actions

❌ send messages❌ post public❌ purchase❌ transfer money❌ deploy❌ delete external

🔒 Containment

Level: maximum

Required:

SANDBOX_CONTAINER: Code execution capability

Recommended:

LOG_ACTIONS: Audit trail for all actions

⚡ Risks

SSH key access patterns in: SKILL.md, scripts/save-status.sh high

Mitigation: Verify legitimate need for SSH access. Consider sandboxing.

Unauthorized tool use: MCP_SYS_CRITICAL_ACCESS, TOOL_ABUSE_SYSTEM_MODIFICATION critical

Mitigation: Avoid accessing system directories unless absolutely necessary.

Command injection risk: TIRITH_DOTFILE_OVERWRITE high

Social engineering indicators: SOCIAL_ENG_VAGUE_DESCRIPTION low

Mitigation: Provide clear, detailed description of skill functionality

Data exfiltration patterns: MCP_EXFIL_EXTERNAL_UPLOAD high

Mitigation: Document all external data transfers. Remove suspicious upload references.

Want a deeper analysis?

This report was generated by static analysis. Get an LLM-powered deep review with behavioral reasoning and attack surface mapping.

🧠 Deep Analysis — $5.00

🚨 Incident Response

Kill switch: Stop the agent process

Containment: Review logs for unexpected actions

Recovery: Depends on skill capabilities

📄 Raw SSDS JSON click to expand

{
  "meta": {
    "document_id": "ssds:auto:mcp-ssh-manager:0.1.1",
    "ssds_version": "0.2.0",
    "scanner_version": "0.4.0+fe6fd9123d50",
    "created_at": "2026-03-05T11:43:27.303Z",
    "created_by": {
      "agent": "safeagentskills-cli/generate-ssds"
    },
    "language": "en",
    "notes": "Auto-generated SSDS. Manual review recommended."
  },
  "skill": {
    "name": "MCP SSH Manager",
    "version": "0.1.1",
    "format": "agent_skill",
    "description": "This skill should be used when the user asks to \"run ssh command\", \"execute on server\", \"ssh session\", \"upload file\", \"download file\", \"ssh tunnel\", \"check server status\", \"monitor server\", \"deploy files\", \"backup server\", or needs remote server management. This skill emphasizes session reuse, workdir organization, and content persistence for sustainable operations.",
    "publisher": "ClawHub",
    "source": {
      "channel": "clawhub",
      "slug": "mcp-ssh-manager",
      "owner": "iMaxTomas",
      "downloads": 1244,
      "stars": 0
    },
    "artifact": {
      "sha256": "7e6bd130e4f72c92c0643ef30283e0beb0285d4eda61721973bfa1c62f44ae6b",
      "hash_method": "files_sorted"
    }
  },
  "capabilities": {
    "execution": {
      "can_exec_shell": true,
      "can_exec_code": false,
      "privilege_level": "admin",
      "can_install_deps": false,
      "can_persist": false
    },
    "filesystem": {
      "reads_workspace": false,
      "reads_user_home": true,
      "reads_system": false,
      "writes_workspace": false,
      "writes_user_home": false,
      "writes_system": false,
      "can_delete": false
    },
    "network": {
      "egress": "any",
      "ingress": false
    },
    "credentials": {
      "reads_env_vars": false,
      "reads_credential_files": true,
      "reads_browser_data": false,
      "reads_keychain": false
    },
    "services": [],
    "actions": {
      "can_send_messages": false,
      "can_post_public": false,
      "can_purchase": false,
      "can_transfer_money": false,
      "can_deploy": false,
      "can_delete_external": false
    },
    "prompt_injection_surfaces": [
      "web"
    ],
    "content_types": [
      "general"
    ]
  },
  "hazards": {
    "hdac": {
      "H": 4,
      "D": 4,
      "A": 0,
      "C": 1
    },
    "flags": [
      "EXEC",
      "PRIVILEGED",
      "FS_READ_USER",
      "NET_EGRESS_ANY",
      "CREDS_FILES",
      "PI_WEB"
    ],
    "custom_flags": [
      {
        "code": "CRED_SSH",
        "name": "SSH Key Access",
        "description": "Accesses SSH keys in: SKILL.md, scripts/save-status.sh"
      },
      {
        "code": "PRIVILEGE_ESCALATION",
        "name": "Privilege Escalation",
        "description": "Uses elevated privileges (sudo/root) in: SKILL.md"
      },
      {
        "code": "TOOL_ABUSE",
        "name": "Unauthorized Tool Use",
        "description": "MCP_SYS_CRITICAL_ACCESS, TOOL_ABUSE_SYSTEM_MODIFICATION: Access to critical system directories"
      },
      {
        "code": "SOCIAL_ENGINEERING",
        "name": "Social Engineering Risk",
        "description": "SOCIAL_ENG_VAGUE_DESCRIPTION: Skill description is too vague or missing"
      },
      {
        "code": "COMMAND_INJECTION",
        "name": "Command Injection Risk",
        "description": "TIRITH_DOTFILE_OVERWRITE: Redirecting output to home directory dotfiles (shell config, SSH keys, etc.)"
      },
      {
        "code": "DATA_EXFILTRATION",
        "name": "Data Exfiltration Risk",
        "description": "MCP_EXFIL_EXTERNAL_UPLOAD: Description mentions uploading data to external servers"
      }
    ],
    "confidence": {
      "level": "medium",
      "basis": [
        "static_analysis"
      ],
      "notes": "Detected 6 security patterns (11 vendored rule hits). Review recommended."
    },
    "rationale": {
      "H": "H4: Critical: Privilege escalation or malware detected",
      "D": "D4: Critical: Credential theft or data exfiltration",
      "A": "A0: No side effects detected",
      "C": "C1: General content"
    }
  },
  "containment": {
    "level": "maximum",
    "required": [
      {
        "control": "SANDBOX_CONTAINER",
        "reason": "Code execution capability"
      }
    ],
    "recommended": [
      {
        "control": "LOG_ACTIONS",
        "reason": "Audit trail for all actions"
      }
    ],
    "uncontained_risk": "Risk level depends on manual review of actual capabilities."
  },
  "risks": {
    "risks": [
      {
        "risk": "SSH key access patterns in: SKILL.md, scripts/save-status.sh",
        "severity": "high",
        "mitigation": "Verify legitimate need for SSH access. Consider sandboxing."
      },
      {
        "risk": "Unauthorized tool use: MCP_SYS_CRITICAL_ACCESS, TOOL_ABUSE_SYSTEM_MODIFICATION",
        "severity": "critical",
        "mitigation": "Avoid accessing system directories unless absolutely necessary."
      },
      {
        "risk": "Command injection risk: TIRITH_DOTFILE_OVERWRITE",
        "severity": "high"
      },
      {
        "risk": "Social engineering indicators: SOCIAL_ENG_VAGUE_DESCRIPTION",
        "severity": "low",
        "mitigation": "Provide clear, detailed description of skill functionality"
      },
      {
        "risk": "Data exfiltration patterns: MCP_EXFIL_EXTERNAL_UPLOAD",
        "severity": "high",
        "mitigation": "Document all external data transfers. Remove suspicious upload references."
      }
    ],
    "limitations": [
      "Static analysis only - runtime behavior not verified"
    ]
  },
  "incident_response": {
    "kill_switch": [
      "Stop the agent process"
    ],
    "containment": [
      "Review logs for unexpected actions"
    ],
    "recovery": [
      "Depends on skill capabilities"
    ]
  },
  "evidence": [
    {
      "evidence_id": "EV:file-1",
      "type": "file_excerpt",
      "title": "SKILL.md",
      "file_path": "SKILL.md"
    },
    {
      "evidence_id": "EV:file-2",
      "type": "file_excerpt",
      "title": "scripts/save-status.sh",
      "file_path": "scripts/save-status.sh"
    },
    {
      "evidence_id": "EV:file-3",
      "type": "file_excerpt",
      "title": "scripts/log-command.sh",
      "file_path": "scripts/log-command.sh"
    },
    {
      "evidence_id": "EV:file-4",
      "type": "file_excerpt",
      "title": "scripts/create-workdir.sh",
      "file_path": "scripts/create-workdir.sh"
    },
    {
      "evidence_id": "EV:file-5",
      "type": "file_excerpt",
      "title": "_meta.json",
      "file_path": "_meta.json"
    },
    {
      "evidence_id": "EV:cisco-1",
      "type": "file_excerpt",
      "title": "SOCIAL_ENG_VAGUE_DESCRIPTION [LOW] SKILL.md:1: ---",
      "file_path": "SKILL.md"
    },
    {
      "evidence_id": "EV:cisco-2",
      "type": "file_excerpt",
      "title": "MCP_EXFIL_EXTERNAL_UPLOAD [HIGH] SKILL.md:3: description: This skill should be used when the user asks to \"run ssh command\", ",
      "file_path": "SKILL.md"
    },
    {
      "evidence_id": "EV:cisco-3",
      "type": "file_excerpt",
      "title": "TIRITH_DOTFILE_OVERWRITE [HIGH] SKILL.md:178: echo \"## $(date)\" >> ~/.ssh-workdir/{hostname}/{YYYY-MM-DD}-{topic}/commands.md",
      "file_path": "SKILL.md"
    },
    {
      "evidence_id": "EV:cisco-4",
      "type": "file_excerpt",
      "title": "MCP_SYS_CRITICAL_ACCESS [HIGH] scripts/save-status.sh:1: #!/bin/bash",
      "file_path": "scripts/save-status.sh"
    },
    {
      "evidence_id": "EV:cisco-5",
      "type": "file_excerpt",
      "title": "MCP_SCRIPT_ANSI_DECEPTION [HIGH] scripts/save-status.sh:7: RED='\\033[0;31m'",
      "file_path": "scripts/save-status.sh"
    },
    {
      "evidence_id": "EV:cisco-6",
      "type": "file_excerpt",
      "title": "TIRITH_ANSI_ESCAPE_IN_STRING [HIGH] scripts/save-status.sh:7: RED='\\033[0;31m'",
      "file_path": "scripts/save-status.sh"
    },
    {
      "evidence_id": "EV:cisco-7",
      "type": "file_excerpt",
      "title": "MCP_SYS_CRITICAL_ACCESS [HIGH] scripts/log-command.sh:1: #!/bin/bash",
      "file_path": "scripts/log-command.sh"
    },
    {
      "evidence_id": "EV:cisco-8",
      "type": "file_excerpt",
      "title": "TOOL_ABUSE_SYSTEM_MODIFICATION [CRITICAL] scripts/create-workdir.sh:99: chmod 700 \"${WORKDIR}\"",
      "file_path": "scripts/create-workdir.sh"
    },
    {
      "evidence_id": "EV:cisco-9",
      "type": "file_excerpt",
      "title": "MCP_SYS_CRITICAL_ACCESS [HIGH] scripts/create-workdir.sh:1: #!/bin/bash",
      "file_path": "scripts/create-workdir.sh"
    },
    {
      "evidence_id": "EV:cisco-10",
      "type": "file_excerpt",
      "title": "MCP_SCRIPT_ANSI_DECEPTION [HIGH] scripts/create-workdir.sh:7: RED='\\033[0;31m'",
      "file_path": "scripts/create-workdir.sh"
    }
  ]
}