Ssh Manager

What This Skill Does

The SSH Manager skill empowers your OpenClaw AI agent to become a seamless bridge between your workspace and your remote servers. It is a specialized utility for system administrators and developers who need to organize, audit, and maintain secure remote access protocols without manually editing complex configuration files. By automating the management of ~/.ssh/config and simplifying the key generation process, the agent minimizes human error and ensures standard security practices—such as using Ed25519 keys—are applied consistently. The skill includes robust input validation to prevent common configuration mistakes and provides a safe workflow for modifying, testing, and auditing existing SSH connections.

Installation

To add this skill to your OpenClaw agent, execute the following command in your terminal: clawhub install openclaw/skills/skills/sa9saq/ssh-manager

Ensure that you have ssh and ssh-keygen available on your system, as this skill relies on native binaries for all operations.

Use Cases

This skill is perfect for scenarios involving multi-server environment management. You can quickly add a new staging server with a predefined alias, audit the permissions of your existing private keys to ensure they aren't exposed, or test the connectivity of a production cluster before starting a deployment. It is particularly useful for engineers who frequently switch between different Jump hosts (ProxyJump) or need to organize dozens of infrastructure nodes efficiently.

Example Prompts

1. "OpenClaw, list all my currently configured SSH hosts in a table format and then test the connection for 'production-db'."
2. "Generate a new Ed25519 SSH key for my cloud server and suggest the block I should add to my ~/.ssh/config to use it."
3. "Check the permissions of my keys in ~/.ssh/ and let me know if any are insecure or if I need to update my config file."

Tips & Limitations

To maintain high security, the skill strictly prohibits the display of private key contents. It enforces a strict "backup-before-edit" policy for the configuration file. Please note that when dealing with Host * blocks, the agent will warn you, as these configurations apply globally and can affect subsequent SSH commands. Always verify the proposed configuration block presented by the agent before confirming an write operation. While the agent supports complex setups like ProxyJump, ensure your jump host is already correctly configured in your file to avoid connection timeouts. If a conflict occurs, the tool will alert you; prioritize renaming aliases to maintain the desired priority in your SSH config file.