sjht-ssh-ops

This skill appears to do what it claims: generate SSH keys, deploy public keys, test logins, and run remote commands. Before installing or running it, review and consider the following: - Inspect the script yourself (scripts/ssh-key-setup.sh) to confirm you're comfortable with its behavior. It will write keys to ~/.ssh and may overwrite or add files there. - The script will try to install sshpass via apt-get or yum automatically if missing. That changes system packages and likely requires root; prefer to install sshpass yourself or run the script with awareness of this side effect. - Deployment uses an SSHPASS environment variable for the target host password. Do not store that password in chat logs or persistent files; pass it only in a secure, ephemeral way and unset it afterwards. Recognize this transmits plaintext credentials to sshpass for password-based login during deployment. - The script calls ssh-copy-id with StrictHostKeyChecking=no, which accepts unknown host keys and bypasses interactive host-key verification — consider verifying host keys manually to avoid connecting to an unexpected host. - Because the skill runs shell commands, only use it with hosts you trust. If you need stronger guarantees, run the script locally (not via an agent) and ensure your environment has appropriate backups for existing SSH keys. If you want higher assurance, ask the maintainer to (1) declare SSHPASS as an optional env var in metadata, (2) avoid auto-installing packages without user confirmation, and (3) document required privileges for package installation.