ssh-tunnel
Facilitates secure remote access and port forwarding using SSH tunneling for efficient network management and debugging.
Install this skill
Security score
The ssh-tunnel skill was audited on Feb 9, 2026 and we found 56 security issues across 3 threat categories, including 2 critical. Review the findings below before installing.
Categories Tested
AI Security Analysis
An AI model reviewed this skill's content and provided the following security assessment:
The skill contains several patterns that could potentially lead to data exfiltration and unauthorized file access, particularly related to SSH configurations and commands. While these commands are common in SSH usage, their presence without clear context or safeguards raises concerns about misuse. The curl commands to non-GitHub URLs and access to sensitive SSH files could be misused if the skill is executed in an untrusted environment.
Security Issues
Curl to non-GitHub URL
| 52 | # On the remote: curl http://localhost:8080 → hits your local :3000 |
Curl to non-GitHub URL
| 71 | # Use with curl |
Access to hidden dotfiles in home directory
| 103 | # ~/.ssh/config |
Access to hidden dotfiles in home directory
| 109 | IdentityFile ~/.ssh/bastion_key |
Access to hidden dotfiles in home directory
| 132 | # ~/.ssh/config |
Access to hidden dotfiles in home directory
| 145 | IdentityFile ~/.ssh/prod_ed25519 |
Access to hidden dotfiles in home directory
| 151 | IdentityFile ~/.ssh/staging_ed25519 |
Access to hidden dotfiles in home directory
| 156 | IdentityFile ~/.ssh/dev_key |
Access to hidden dotfiles in home directory
| 164 | # ~/.ssh/config |
Access to hidden dotfiles in home directory
| 167 | ControlPath ~/.ssh/sockets/%r@%h-%p |
Access to hidden dotfiles in home directory
| 176 | mkdir -p ~/.ssh/sockets |
Access to hidden dotfiles in home directory
| 190 | ssh-keygen -t ed25519 -C "user@machine" -f ~/.ssh/mykey_ed25519 |
Access to hidden dotfiles in home directory
| 193 | ssh-keygen -t rsa -b 4096 -C "user@machine" -f ~/.ssh/mykey_rsa |
Access to hidden dotfiles in home directory
| 196 | ssh-keygen -t ed25519 -N "" -f ~/.ssh/deploy_key |
Access to hidden dotfiles in home directory
| 203 | ssh-copy-id -i ~/.ssh/mykey_ed25519.pub user@remote-server |
Access to hidden dotfiles in home directory
| 206 | cat ~/.ssh/mykey_ed25519.pub | ssh user@remote-server "mkdir -p ~/.ssh && chmod 700 ~/.ssh && cat >> ~/.ssh/authorized_keys && chmod 600 ~/.ssh/authorized_keys" |
Access to hidden dotfiles in home directory
| 216 | ssh-add ~/.ssh/mykey_ed25519 |
Access to hidden dotfiles in home directory
| 219 | ssh-add -t 3600 ~/.ssh/mykey_ed25519 |
Access to hidden dotfiles in home directory
| 237 | chmod 700 ~/.ssh |
Access to hidden dotfiles in home directory
| 238 | chmod 600 ~/.ssh/id_ed25519 # Private key |
Access to hidden dotfiles in home directory
| 239 | chmod 644 ~/.ssh/id_ed25519.pub # Public key |
Access to hidden dotfiles in home directory
| 240 | chmod 600 ~/.ssh/config |
Access to hidden dotfiles in home directory
| 241 | chmod 600 ~/.ssh/authorized_keys |
Access to hidden dotfiles in home directory
| 262 | scp -i ~/.ssh/mykey -P 2222 file.txt user@remote:/path/ |
Access to hidden dotfiles in home directory
| 281 | rsync -avz -e "ssh -i ~/.ssh/deploy_key -p 2222" ./dist/ user@remote:/var/www/ |
Access to hidden dotfiles in home directory
| 332 | ssh -o IdentitiesOnly=yes -i ~/.ssh/specific_key user@remote |
Access to hidden dotfiles in home directory
| 344 | # Common: wrong permissions on ~/.ssh or authorized_keys |
Access to hidden dotfiles in home directory
| 361 | - Use `~/.ssh/config` for everything. Named hosts with stored settings are faster and less error-prone than typing long commands. |
Access to hidden dotfiles in home directory
| 367 | - Keep your `~/.ssh/config` organized with comments. Future-you will appreciate it. |
Access to SSH directory
| 103 | # ~/.ssh/config |
Access to SSH directory
| 109 | IdentityFile ~/.ssh/bastion_key |
Access to SSH directory
| 132 | # ~/.ssh/config |
Access to SSH directory
| 145 | IdentityFile ~/.ssh/prod_ed25519 |
Access to SSH directory
| 151 | IdentityFile ~/.ssh/staging_ed25519 |
Access to SSH directory
| 156 | IdentityFile ~/.ssh/dev_key |
Access to SSH directory
| 164 | # ~/.ssh/config |
Access to SSH directory
| 167 | ControlPath ~/.ssh/sockets/%r@%h-%p |
Access to SSH directory
| 176 | mkdir -p ~/.ssh/sockets |
Access to SSH directory
| 190 | ssh-keygen -t ed25519 -C "user@machine" -f ~/.ssh/mykey_ed25519 |
Access to SSH directory
| 193 | ssh-keygen -t rsa -b 4096 -C "user@machine" -f ~/.ssh/mykey_rsa |
Access to SSH directory
| 196 | ssh-keygen -t ed25519 -N "" -f ~/.ssh/deploy_key |
Access to SSH directory
| 203 | ssh-copy-id -i ~/.ssh/mykey_ed25519.pub user@remote-server |
Access to SSH directory
| 206 | cat ~/.ssh/mykey_ed25519.pub | ssh user@remote-server "mkdir -p ~/.ssh && chmod 700 ~/.ssh && cat >> ~/.ssh/authorized_keys && chmod 600 ~/.ssh/authorized_keys" |
Access to SSH directory
| 216 | ssh-add ~/.ssh/mykey_ed25519 |
Access to SSH directory
| 219 | ssh-add -t 3600 ~/.ssh/mykey_ed25519 |
Access to SSH directory
| 238 | chmod 600 ~/.ssh/id_ed25519 # Private key |
Access to SSH directory
| 239 | chmod 644 ~/.ssh/id_ed25519.pub # Public key |
Access to SSH directory
| 240 | chmod 600 ~/.ssh/config |
Access to SSH directory
| 241 | chmod 600 ~/.ssh/authorized_keys |
Access to SSH directory
| 262 | scp -i ~/.ssh/mykey -P 2222 file.txt user@remote:/path/ |
Access to SSH directory
| 281 | rsync -avz -e "ssh -i ~/.ssh/deploy_key -p 2222" ./dist/ user@remote:/var/www/ |
Access to SSH directory
| 332 | ssh -o IdentitiesOnly=yes -i ~/.ssh/specific_key user@remote |
Access to SSH directory
| 361 | - Use `~/.ssh/config` for everything. Named hosts with stored settings are faster and less error-prone than typing long commands. |
Access to SSH directory
| 367 | - Keep your `~/.ssh/config` organized with comments. Future-you will appreciate it. |
External URL reference
| 52 | # On the remote: curl http://localhost:8080 → hits your local :3000 |
External URL reference
| 72 | curl --socks5-hostname localhost:1080 https://example.com |