osh

Execute remote shell commands on NAT-restricted Windows, Linux, and macOS devices via WebSocket tunneling using osh CLI and osh-admin device management.

1|Updated Feb 3, 2026
One-click install
npx skills add https://github.com/svr2kos2/osh-skills --skill osh
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: osh
Source: https://github.com/svr2kos2/osh-skills/tree/main
Command: npx skills add https://github.com/svr2kos2/osh-skills --skill osh

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Remotely execute shell commands on devices behind NAT without requiring port forwarding, enabling secure, scalable remote administration.

Core Features & Use Cases

  • Remote command execution on Windows/Linux/macOS devices behind NAT using the OSH bridge.
  • PTY and non-PTY modes to support simple commands and interactive programs.
  • Device management via osh-admin: list, approve, alias, remove, reload.
  • Cross-platform command examples and automated workflows via osh CLI.

Quick Start

Run osh <device_id|alias> "<command>" to execute a remote command on a device.

Frequently Asked Questions about osh

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I execute remote shell commands on devices behind NAT?

To execute remote shell commands on devices behind NAT, you can use a WebSocket tunneling bridge. This approach allows secure command execution on remote machines without requiring port forwarding or a public IP address.

Can I run interactive terminal programs on remote machines without port forwarding?

Yes, you can run interactive terminal programs on remote machines without port forwarding using PTY mode. This WebSocket-based remote shell access supports both interactive sessions and non-PTY modes for simple command execution.

Does remote shell access via WebSocket tunneling work across Windows, Linux, and macOS?

Yes, remote shell access via WebSocket tunneling works across Windows, Linux, and macOS. This cross-platform administration capability allows you to manage devices and execute commands consistently regardless of the operating system.

What is the best way to manage NATed devices for remote administration?

The best way to manage NATed devices for remote administration is using a dedicated CLI tool for device discovery and approval. You can list, approve, assign aliases, remove, and reload devices using an admin interface.

Do I need a pre-shared secret key for remote command execution on NAT-restricted devices?

Yes, you need a pre-shared secret key for authenticating remote command execution on NAT-restricted devices. Additionally, a running relay or daemon is required to establish the WebSocket tunnel for secure communication.

Why use WebSocket tunneling instead of traditional SSH for remote administration?

WebSocket tunneling is used instead of traditional SSH for remote administration to bypass NAT restrictions without port forwarding. It enables scalable, secure shell access to devices that lack public IP addresses or direct inbound connectivity.