Token导航 LogoToken导航TokenDH.com
中转站排行榜
研究检索敏感数据clawhub未标认证来源可访问clear审计通过

teleport-tsh-ssh（传送 tsh ssh）

Agent Skill

teleport-tsh-ssh 用于查找、检索和筛选相关信息，适合在 OpenClaw 中需要根据关键词、任务场景或来源线索快速定位候选结果时使用。可结合来源仓库、安装命令和原始 README 继续核验具体用法。安装前建议确认权限范围、维护状态，以及是否会触发联网、命令执行或文件读写。

总安装

7,009

周安装

298

GitHub Stars

公开资料未说明

下载量

2,456
OpenClaw

安装说明

本站只整理中文说明和来源信息，不托管安装包，也不代用户安装。

GitHub

来源数

2

许可证

MIT-0

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手，先确认命令和权限，再让它执行。

请帮我安装这个 Agent Skill：teleport-tsh-ssh（传送 tsh ssh）
来源仓库：https://github.com/webvictim/teleport-tsh-ssh
安装命令：
openclaw skills install teleport-tsh-ssh
安装前请先检查当前环境是否支持对应 CLI，并向我确认将要执行的命令、安装目录、联网范围和文件读写权限；确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 OpenClaw 从第三方来源获取 Skill；本站只展示命令，不托管安装包，也不自动执行。

ClawHubOpenClaw
openclaw skills install teleport-tsh-ssh

简介

通过 Teleport tsh CLI 实现 SSH 主机访问和远程命令执行。

  • 适合安全地管理受控环境下的多台服务器。teleport-tsh-ssh 属于研究检索类 Skill，可作为该场景下的辅助能力补充。
  • 支持基于身份的访问控制和审计日志记录。
  • 需预先部署 Teleport 集群并配置机器身份。
  • 操作前应验证目标主机是否在允许列表中。

SKILL.md

name
teleport-tsh-ssh
description
Use Teleport tsh CLI with a Machine ID (tbot) identity file to SSH into Teleport-managed hosts or run remote commands through Teleport access controls. Trigger when asked to connect to a Teleport host, execute commands on Teleport nodes, or troubleshoot tsh access using a local tbot-refreshed identity. Complements the teleport-tbot-bootstrap skill for creating and persisting the local Machine ID identity source.

teleport-tsh-ssh

Use this skill to access Teleport SSH nodes via tsh with an explicit identity file (-i) and persistent proxy selection.

Pair this with teleport-tbot-bootstrap to set up and persist the local Machine ID identity source.

Compatibility

Tested against Teleport/tsh/tbot 18.7.0.

Identity policy (required)

Always pass -i <identity-file> to tsh commands.

Default identity path:

  • ~/.openclaw/workspace/tbot/identity

If the default does not exist, discover a workspace identity file and use the best match.

Identity discovery fallback

When default identity is missing, search within workspace for candidate files named like:

  • identity
  • *.identity
  • tbot/identity

Validate candidate format before use. A valid Teleport Machine ID identity file typically contains multiple blocks, such as:

  • -----BEGIN PRIVATE KEY-----
  • an OpenSSH user cert line (*-cert-v01@openssh.com ...)
  • one or more -----BEGIN CERTIFICATE----- blocks

Pick the most likely current file (prefer paths under tbot/, then newest mtime).

Security notes

  • Never commit identity files, bot state directories, tokens, or registration secrets.
  • Prefer explicit paths and least-privilege role mappings for automation identities.

Known limitations (v1.0.0)

  • Focuses on Teleport SSH node access (tsh ssh, tsh ls, tsh scp).
  • Does not cover Teleport app/db/kubernetes access workflows.

Proxy resolution (required)

Resolve proxy in this order:

  1. If TELEPORT_PROXY is set, use it.
  2. Else, read saved proxy from ~/.openclaw/workspace/tbot/proxy (single-line text file) if present.
  3. Else, prompt user for Teleport proxy address, then save it to ~/.openclaw/workspace/tbot/proxy for future runs.

Always include proxy in commands when resolved:

  • tsh -i <identity> --proxy=<proxy> ...

Quick workflow

  1. Confirm tsh is installed.
  2. Resolve identity file path (default first, then fallback discovery).
  3. If no valid identity file is found, prompt user to provide the identity file path.
  4. Resolve proxy (TELEPORT_PROXY first, then saved proxy file, then prompt-and-save).
  5. Check auth status when useful: tsh -i <identity> --proxy=<proxy> status.
  6. Discover hosts if needed: tsh -i <identity> --proxy=<proxy> ls.
  7. Connect/run command with explicit identity:

- tsh -i <identity> --proxy=<proxy> ssh <host> - tsh -i <identity> --proxy=<proxy> ssh <host> -- <command> [args...]

  1. Return concise result + actionable error details.

Command patterns

  • Interactive shell:

- tsh -i <identity> --proxy=<proxy> ssh <host>

  • Remote command execution:

- tsh -i <identity> --proxy=<proxy> ssh <host> -- <command> [args...]

  • Set remote login user:

- tsh -i <identity> --proxy=<proxy> ssh <login>@<host> - or tsh -i <identity> --proxy=<proxy> ssh --login=<login> <host>

  • List available nodes:

- tsh -i <identity> --proxy=<proxy> ls

If user asks what nodes are available, run tsh ls with identity+proxy and report back.

Prefer non-interactive form when user asks for command output.

File copy with Teleport SCP

Use tsh scp with identity+proxy for file transfer. Syntax mirrors OpenSSH scp.

  • Local → remote:

- tsh -i <identity> --proxy=<proxy> scp <local_path> <host>:<remote_path>

  • Remote → local:

- tsh -i <identity> --proxy=<proxy> scp <host>:<remote_path> <local_path>

Troubleshooting checklist

  • tsh: command not found → install Teleport client.
  • Identity file missing/unreadable → resolve fallback file; if none found, ask user for path.
  • Missing proxy → ask user for proxy, save to ~/.openclaw/workspace/tbot/proxy, retry.
  • not logged in / cert expired → refresh Machine ID output (tbot service health).
  • access denied → role/login mismatch; verify host and identity origin.
  • host not found → verify with tsh -i <identity> --proxy=<proxy> ls and cluster/proxy context.

Clawhub listing copy

Clawhub short description

Use tsh with explicit Machine ID identity (-i) for Teleport SSH, remote commands, node listing, and tsh scp.

Companion skill

Use with teleport-tbot-bootstrap to create and persist the local Machine ID identity source.

Clawhub long description

Standardize Teleport server access with identity-first command patterns. Enforce explicit identity usage, resolve proxy consistently, support host discovery, command execution, and file transfer with practical troubleshooting guidance.

References

  • references/tsh-ssh-reference.md
  • https://goteleport.com/docs/reference/cli/tsh/#tsh-ssh

适合场景

01

OpenClaw 用户查找和安装 Skill 时

02

用户想查找某类 Agent Skill 时

03

需要根据任务场景推荐可安装能力包时

04

需要对比不同来源的安装命令和来源信息时

能力概览

能力 1

按任务关键词查找相关 Skills

能力 2

展示可复制的安装命令

能力 3

保留来源站点、仓库和原始说明，方便继续核验

能力 4

补充不同宿主或平台的使用分布数据

能力 5

展示第三方安全扫描或审计结果

安装后应在对应宿主中按原始 README 的触发条件使用；具体调用方式请以来源页面和 README 为准。

平台分布

OpenClaw

76.67%
按下载量换算1,883

安全审计

VirusTotal

通过

ClawScan

通过

Static analysis

通过

权限和风险

敏感数据

该 Skill 可能接触密钥、Token、环境变量或敏感配置，应进入高风险复核队列，默认不自动发布。

安装前确认

本站仅展示第三方公开信息，不托管安装包，不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。当前只有一个来源，正式发布前建议补源仓库或其他目录站核验。

来源信息

GitHub 仓库

github.com

/webvictim/teleport-tsh-ssh

SKILL.md 来源

clawhub.ai

/webvictim/teleport-tsh-ssh

继续浏览同类 Skills

更多研究检索 Skills（73,675）返回 Skills 目录

上一个 Skill

telepact-api（telepact API 搜索）

用于辅助 API 设计、接口文档、请求响应结构和服务集成说明。它适合让 Agent 梳理 endpoint、生成 OpenAPI 草稿、检查字段命名、整理错误码或辅助前后端联调。使用时需要确认真实业务语义、鉴权方式、分页和错误处理规则；涉及生成接口文档时，应避免凭空补字段，最好从现有代码、schema 或接口样例中提取事实。

下一个 Skill

telesign（telesign 搜索）

telesign 用于查找、检索和筛选相关信息，适合在 OpenClaw 中需要根据关键词、任务场景或来源线索快速定位候选结果时使用。可结合来源仓库、安装命令和原始 README 继续核验具体用法。安装前建议确认权限范围、维护状态，以及是否会触发联网、命令执行或文件读写。