ssh-ops

SUSPICIOUS. The skill is largely purpose-aligned for SSH administration, and most flagged SSH/SCP activity is expected. However, it expands trust by routing live SSH credentials and remote-shell control through an unpinned third-party `npx` MCP package, and its examples still place secrets on CLI args/.mcp.json despite upstream guidance to avoid that. This is not confirmed malware, but it is a medium-high security risk due to credential forwarding and real-world remote execution scope.

No malware is evident because the supplied content is documentation rather than executable package code. It documents legitimate SSH administration functionality but presents meaningful security risks: unpinned npx package execution, cleartext credential storage, arbitrary remote shell access, optional root privileges, and weak first-use host-key verification. Pin and verify the package, protect credentials outside version control, verify host keys out of band, and restrict sudo access.