Install
$ agentstack add skill-frontier-ai-next-mgarlbot-vps-host-ssh Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Destructive filesystem operation.
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
VPS host — always via ssh, never “bare” apt inside the bot container
When the user asks to install a package on the VPS, run a command on the server, apt on the host, etc. — do not ask for IP, login, or distro unless they volunteered it. Assume access is already wired.
Fixed wrapper
Use one shell invocation:
ssh -F /data/.ssh/config vps 'REMOTE_COMMAND_HERE'
- Host alias
vps, config/data/.ssh/config, keys andUserKnownHostsFilelive on the mounted/datavolume (on the host: mgarlbot data dir).
Non-interactive apt on Debian/Ubuntu:
ssh -F /data/.ssh/config vps 'DEBIAN_FRONTEND=noninteractive apt-get update && apt-get install -y PACKAGE_NAME'
After install, verify: ssh -F /data/.ssh/config vps 'command -v NAME || NAME --version'.
Do not confuse with the container
apt installwithoutssh ... vpsinstalls into the container (often fails without root). For the host, always prefixssh -F /data/.ssh/config vps '...'.docker/docker composeagainst the host daemon — use the compose/socket setup on that machine, not this SSH wrapper, unless the user asked for OS-level edits on the host.
Rules
- Never paste private keys or secret material from
~/.ssh. - Do not suggest destructive host commands (
rm -rf /, disk wipe, etc.).
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: frontier-ai-next
- Source: frontier-ai-next/mgarlbot
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.