shell-exec — SSH command execution

Capabilities

• Run a single / multiple shell commands
• Capture stdout / stderr for non-interactive commands
• Long tasks: prefer nohup ... & or tmux

Safety gate (required)

Blacklist (hard-blocked on match, --mode yes cannot override; regex is case-insensitive):

• Recursive delete: rm -rf /, rm -rf *
• Format / wipe disk: mkfs, mkfs.*, dd … of=/dev/*, wipefs, parted … mklabel
• Database destruction: DROP DATABASE, TRUNCATE, FLUSHALL, FLUSHDB
• System lockup: reboot, shutdown, fork bomb :(){ :|:& };:
• Critical files: >/>> overwrite /etc/passwd, /etc/shadow
• Others: find -delete, kill -9 1, chattr -i /etc/…

Second confirmation (warnlist, --mode auto denies / --mode yes or interactive allows): rm, rmi, chmod, chown, systemctl stop|restart|disable, kill, ufw disable|delete|deny 22, iptables -F|-P, docker system prune, PasswordAuthentication no, sysctl -w

Second-confirmation prompt: "About to run on {host}: {cmd}. Confirm? (yes/abort)"

Audit

Every command records: ts / host / cmd / decision / reason / code (exit code) to ~/.opsctl/audit.log.

Scenarios

• Check load: uptime; free -h; df -h
• List processes: ps aux --sort=-%mem | head
• Install package: apt update && apt install -y xxx

Forbidden

• Run against unauthorized hosts
• Bypass the second confirmation
• Silently run destructive commands

EXECUTION (real engine)

This skill is executed by the shell-exec subcommand of bin/opsctl.js (src/transport.js calls system ssh).

opsctl shell-exec --host web1 --cmd "uptime; free -h" --mode auto
# --mode auto       : auto-block dangerous commands; warn class needs explicit --mode yes or interactive
# --mode yes        : auto-approve warn class (trusted scripts only)
# --mode interactive: per-command stdin confirmation

Every decision (allow/confirm/block) is written to ~/.opsctl/audit.log.