Agent-skills sysadmin-toolbox

Tool discovery and shell one-liner reference for sysadmin, DevOps, and security tasks. AUTO-CONSULT this skill when the user is: troubleshooting network issues, debugging processes, analyzing logs, working with SSL/TLS, managing DNS, testing HTTP endpoints, auditing security, working with containers, writing shell scripts, or asks 'what tool should I use for X'. Source: github.com/trimstray/the-book-of-secret-knowledge

install
source · Clone the upstream repo
git clone https://github.com/jdrhyne/agent-skills
Claude Code · Install into ~/.claude/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/jdrhyne/agent-skills "$T" && mkdir -p ~/.claude/skills && cp -r "$T/skills/sysadmin-toolbox" ~/.claude/skills/jdrhyne-agent-skills-sysadmin-toolbox && rm -rf "$T"
manifest: skills/sysadmin-toolbox/SKILL.md
source content

Sysadmin Toolbox

Curated tool recommendations and practical shell one-liners for operational work.

When to Auto-Consult

Load relevant references when user is:

  • Debugging network connectivity, ports, traffic
  • Troubleshooting DNS or SSL/TLS
  • Analyzing processes, memory, disk usage
  • Working with logs or system diagnostics
  • Writing shell scripts or one-liners
  • Asking "what's a good tool for..."
  • Doing security audits or pentesting
  • Working with containers/Docker/K8s

Bundled Guides

FileUse When
shell-oneliners.md
in this skill's
references
folder
Need practical commands for: terminal, networking, SSL, curl, ssh, tcpdump, git, awk, sed, grep, find
cli-tools.md
in this skill's
references
folder
Recommending CLI tools: shells, file managers, network utils, databases, security tools
web-tools.md
in this skill's
references
folder
Web-based tools: SSL checkers, DNS lookup, performance testing, OSINT, scanners
security-tools.md
in this skill's
references
folder
Pentesting, vulnerability scanning, exploit databases, CTF resources
shell-tricks.md
in this skill's
references
folder
Shell scripting patterns and tricks

Safety Boundaries

  • Do not run destructive system commands, privilege-escalation steps, or offensive tooling unless the user explicitly asked for that scope.
  • Do not scan hosts, domains, or networks the user does not control or have permission to assess.
  • Do not assume a command is safe to paste into production without explaining what it does.
  • Do not persist logs, captures, or credentials outside the user's requested troubleshooting workflow.

Quick Tool Index

Network Debugging

  • mtr
    - traceroute + ping combined
  • tcpdump
    /
    tshark
    - packet capture
  • netstat
    /
    ss
    - connection monitoring
  • nmap
    - port scanning
  • curl
    /
    httpie
    - HTTP testing

DNS

  • dig
    /
    host
    - DNS queries
  • dnsdiag
    - DNS diagnostics
  • subfinder
    /
    amass
    - subdomain enumeration

SSL/TLS

  • openssl
    - certificate inspection
  • testssl.sh
    - TLS testing
  • sslyze
    - SSL scanning
  • certbot
    - Let's Encrypt

Process/System

  • htop
    /
    btop
    - process monitoring
  • strace
    /
    ltrace
    - syscall/library tracing
  • lsof
    - open files/connections
  • ncdu
    - disk usage

Log Analysis

  • lnav
    - log navigator
  • GoAccess
    - web log analyzer
  • angle-grinder
    - log slicing

Containers

  • dive
    - Docker image analysis
  • ctop
    - container top
  • lazydocker
    - Docker TUI

Keeping Current

References auto-refresh weekly (Sundays 5am ET) from the upstream repo:

~/clawd-duke-leto/skills/sysadmin-toolbox/scripts/refresh.sh

Manual refresh anytime:

./scripts/refresh.sh [skill-dir]

Example Queries → Actions

"Why is this port not responding?" → Load shell-oneliners.md, search for netstat/ss/lsof commands

"What's a good tool for testing SSL?" → Load cli-tools.md SSL section, recommend testssl.sh or sslyze

"Show me how to find large files" → Load shell-oneliners.md, search for find/ncdu/du commands

"I need to debug DNS resolution" → Load shell-oneliners.md dig section + recommend dnsdiag from cli-tools.md