Agent Plugins Marketplace
All plugins

sysknife

v0.20.1

Linux sysadmin co-pilot as an MCP server: plain-language requests become typed, risk-classified actions that a privileged daemon runs only after out-of-band terminal approval, with an Ed25519-signed audit chain and automatic rollback.

Codex1 MCP serverstdio

By LACS ProjectLicense: MIT1.1k GitHub starsUpdated 15 hours ago

Directory evidence

Runtimes
Codex
Parsed components
1 skill or MCP entry
Source updated
Sep 23, 2026
Manifest status
Canonical path parsed

The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology

Install sysknife for Codex

Installs for the current user
codex plugin marketplace add hashgraph-online/awesome-codex-plugins
codex plugin marketplace upgrade awesome-codex-plugins
codex plugin add sysknife@awesome-codex-plugins

Paste and run these commands in a terminal with Codex. They add and refresh the awesome-codex-plugins catalog, then install this plugin.

Compatibility: the page URL and API slug “sysknife” remain stable.

  • Codex: sysknife@agent-plugin-marketplacesysknife@awesome-codex-plugins

The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.

Get the source manually
git clone https://github.com/hashgraph-online/awesome-codex-plugins

Clone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/lacs-project/sysknife/.

Plugin files

plugins/lacs-project/sysknife/
├── .codex-plugin/plugin.json
└── .mcp.json

MCP servers1

sysknifestdio
command
sysknife
args
mcp-server

Plugin manifests1

plugins/lacs-project/sysknife/.codex-plugin/plugin.json
{
  "name": "sysknife",
  "version": "0.20.1",
  "description": "Linux sysadmin co-pilot as an MCP server: plain-language requests become typed, risk-classified actions that a privileged daemon runs only after out-of-band terminal approval, with an Ed25519-signed audit chain and automatic rollback.",
  "repository": "https://github.com/lacs-project/sysknife",
  "homepage": "https://lacs-project.github.io/sysknife/",
  "author": {
    "name": "LACS Project",
    "url": "https://github.com/lacs-project"
  },
  "license": "MIT",
  "keywords": [
    "linux",
    "sysadmin",
    "mcp",
    "codex",
    "audit",
    "approval",
    "devops"
  ],
  "interface": {
    "displayName": "SysKnife",
    "shortDescription": "Run Linux admin tasks from Codex behind a typed approval gate",
    "longDescription": "SysKnife turns a plain-language request into a plan of typed, risk-classified actions. Nothing executes on the model's word: the privileged daemon is the only component that runs anything, it refuses any action outside its catalogue, and medium- and high-risk steps require a single-use approval receipt minted out-of-band by a human running `sysknife approve` in a terminal. Every authorisation decision, and every approval grant, consumption and revocation, is recorded in Ed25519-signed forward hash chains that a third party can verify with only the exported public key. Failed system updates roll back automatically on atomic-host distros.",
    "developerName": "LACS Project",
    "category": "DevOps",
    "capabilities": [
      "Read",
      "Write"
    ],
    "defaultPrompt": [
      "What is using disk space on this machine?",
      "Install ripgrep",
      "Show me what SysKnife has run recently",
      "Verify the audit chain"
    ],
    "brandColor": "#FF6B1A",
    "composerIcon": "./assets/raster/sysknife-256.png",
    "logo": "./assets/logo/sysknife.svg"
  },
  "mcpServers": "./.codex-plugin/mcp.json"
}

If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.

[sysknife on Agent Plugins Marketplace](https://pluginsmp.com/plugins/sysknife)