ResmoteConsole

通过手机/浏览器远程访问主机上的 Claude Code 或其他 CLI 工具。使用此技能来启动、停止和管理远程开发环境。 **必须触发此技能的场景**： - 用户提到"远程控制台"、"远程终端"、"远程开发"、"ttyd"、"SSH 隧道" - 用户想用手机/平板访问电脑上的开发环境 - 用户提到"移动端编程"...

This skill implements a remote console by starting ttyd and an SSH reverse tunnel and is functionally coherent with that goal — but review and act on these points before installing: - Inspect config.json and remove any dangerous pre-defined commands (e.g., 'claude-bypass' or any command with flags that disable safety checks). - The Python scripts invoke shells (bash -c or pwsh -Command) and may execute command strings from the config or from user-supplied -c values. Only allow trusted commands in the config and avoid passing untrusted text into the --command/-c or --path arguments. - The skill will create background processes and may kill existing 'ttyd' or 'ssh' processes; don't run on critical production machines unless you accept that behavior. - Ensure SSH key-based auth is configured for the target and that the remote port exposure is controlled (firewall/GatewayPorts). Prefer using an SSH alias that you trust. - Consider running these scripts inside an isolated environment (container or VM) and binding ttyd to localhost with secure tunnel endpoints or adding authentication, to reduce exposure. Given the mismatch between the SKILL.md advice ("do not concatenate shell commands") and the scripts' use of shell invocation, treat the implementation as unpolished and audit the code and config before use. If you want me to, I can summarize exactly where arbitrary commands can be injected and propose concrete hardening changes (e.g., avoid shell -c and use argv lists, whitelist commands, or sandbox the console).

Type: OpenClaw Skill Name: remote-console Version: 1.0.0 The skill facilitates remote shell access by deploying a ttyd web terminal and establishing an SSH reverse tunnel to a remote server. It explicitly promotes the use of a 'claude-bypass' command which utilizes the '--dangerously-skip-permissions' flag to remove security guardrails. While the functionality is documented for remote development, the inherent nature of creating reverse tunnels and bypassing security permissions in scripts like start_console.py and config.json poses a significant security risk for unauthorized remote control.