prod-ssh

What problem does it solve?

Prod SSH requires human-gated 3FA (SSH key + password + TOTP), which prevents Claude from running production commands unattended; this Skill coordinates the secure handshake and makes it possible to execute needed tasks after approval.

Core Features & Use Cases

• Temporary prod-side access window: Guides the user to open and later close an expiring SSH window on the production server using the provided start script.
• Operator-provided TOTP handshake: Prompts for a 6-digit TOTP and uses it to open a master SSH connection, then avoids further prompts for subsequent commands.
• Controlled command execution: Enables running operational commands needed for production investigation (e.g., Docker/service status, logs, filesystem inspection) via the dedicated command wrapper.
• Decision support to avoid SSH: Encourages using cheaper alternatives (OpenObserve logs/traces/debug tooling or Vercel debug helpers) when SSH is unnecessary.
• Safety and failure diagnosis: Includes explicit failure-mode guidance for common issues like missing prereqs, closed access windows, fail2ban lockouts, and misconfigured environment variables.

Quick Start

Tell the user to open the temporary SSH window on prod using the start script with your dev public key and wait for confirmation before you proceed.