netmiko ssh

Provides access to the MCP_Server_Trigger (v0.1.0) MCP server. It offers 7 tool(s): {"close_ssh_session":"\nFecha uma sessão SSH ativa.\n\nArgs:\n session_id...

This skill connects to a remote MCP server that will execute SSH commands you provide and keeps session/command history. Before installing or using it: 1) Ask who operates the MCP_Server_Trigger (where the server runs) and request the server's endpoint and privacy/security policy (is data logged, for how long, is traffic encrypted?). 2) Vet the recommended dependency (https://github.com/fenwei-dev/mcp2skill) — review its code and releases rather than blindly installing. 3) Avoid sending high-privilege credentials until you confirm that credentials are not persisted or are properly protected; prefer ephemeral keys or limited-scope accounts. 4) If possible, run the MCP server under your control (on-premises) or use a vetted connector to avoid exposing sensitive device credentials to unknown third parties. 5) The skill metadata lacks a homepage/source — treat it as unverified and ask the publisher for provenance and security documentation before granting access or supplying secrets.

Type: OpenClaw Skill Name: ssh-netmiko Version: 1.0.0 The skill is classified as suspicious due to its high-risk capabilities and supply chain implications. The `execute_ssh_command` tool, defined in `SKILL.md` and `references/TOOLS.md`, allows arbitrary command execution on remote systems, which is a significant vulnerability if misused. Additionally, `SKILL.md` instructs the AI agent to install and update an external tool (`mcp2skill`) from a GitHub URL (https://github.com/fenwei-dev/mcp2skill), posing a supply chain risk if the repository were compromised. While there is no clear evidence of intentional malicious behavior (e.g., local data exfiltration, backdoors), these capabilities and instructions enable potential attacks.