Enables credentialed SSH access to a host with operator-approved multi-factor authentication.
npx skills add https://github.com/glowingkitty/OpenMates --skill prod-ssh
Please help me install this Agent Skill. Skill: prod-ssh Source: https://github.com/glowingkitty/OpenMates/tree/main/.agents/skills/prod-ssh Command: npx skills add https://github.com/glowingkitty/OpenMates --skill prod-ssh
Prod SSH requires human-gated 3FA (SSH key + password + TOTP), which prevents Claude from running production commands unattended; this Skill coordinates the secure handshake and makes it possible to execute needed tasks after approval.
Tell the user to open the temporary SSH window on prod using the start script with your dev public key and wait for confirmation before you proceed.
High-intent search queries and answers about installing and using this skill.
To use AI to SSH into a production server with 3FA, you need a workflow that coordinates the human-gated 3FA handshake by prompting for a 6-digit TOTP to open a master SSH connection for command execution.
The best way to run production diagnostics safely is by using a dedicated command wrapper that executes operational commands over a master SSH connection, ensuring you can inspect server state without exposing secrets in chat.
You set up a temporary SSH access window by running a provided start script on the production server with your public key, opening an expiring connection that must be manually closed after operations complete.
You do not need to provide a TOTP for every command; providing a fresh 6-digit TOTP during the initial master SSH connection handshake opens the session for subsequent command execution without further prompts.
Automated SSH to prod fails when prerequisites are missing, the temporary access window is closed, or fail2ban lockouts occur, requiring explicit failure-mode diagnosis and handling to re-establish the connection.
You should avoid SSH for production server diagnostics when cheaper alternatives like OpenObserve logs, traces, or debug tooling are sufficient, reserving SSH access for when non-SSH debug alternatives cannot solve the issue.
LynxLabVNEstablish SSH tunnels to expose local network services to the internet.
g-bastianelliDiagnose local development issues by checking Docker statuses, container logs, and environment variables.
GodSpeedAICorrelate traces, metrics, and logs to debug SEA-Forge services.
want2betMonitor Bob's operation via web dashboards, MQTT events, and API health checks.
