ssh_file_manager

Manage files on remote machines over Tailscale SSH (Tailnet). Use this skill when the user needs to list, read, write, delete, move, copy, search, chmod, pus...

This skill appears to do what it says (remote file management over SSH), but check a few things before enabling it: 1) Ensure the runtime has ssh, scp, and python3 available — the registry metadata omits these requirements. 2) Be aware the scripts use StrictHostKeyChecking=accept-new (they will auto-accept new host keys), which eases first-time connections but can increase MITM risk on initial contact. 3) The SKILL.md promises path-sanitization and a fallback when remote Python is missing, but the code only escapes single quotes and does not prevent '..' traversal or implement a fallback — treat user-supplied paths carefully and always confirm destructive operations. 4) Because the agent will execute SSH/SCP commands using whatever SSH identity it has access to, only enable this skill if you trust the agent's environment and the set of reachable Tailnet hosts. If you want higher assurance, run the scripts in a restricted environment or manually review and test them on a non-production node first.

Type: OpenClaw Skill Name: ssh-filemanager Version: 1.0.0 The skill provides remote file management capabilities over Tailscale SSH but contains significant security vulnerabilities, primarily shell and Python injection risks. In `scripts/ssh_file_manager.py`, the `chmod` action directly interpolates the `--mode` argument into a shell command without any sanitization or escaping, allowing for arbitrary command execution on the remote host. Additionally, the `action_list` and `action_stat` functions are vulnerable to Python code injection because they interpolate the path into a remote Python script using double quotes without escaping double-quote characters. While the tool's stated purpose is legitimate administration, these implementation flaws pose a high risk of exploitation.