sysknife
v0.20.1Linux sysadmin co-pilot as an MCP server: plain-language requests become typed, risk-classified actions that a privileged daemon runs only after out-of-band terminal approval, with an Ed25519-signed audit chain and automatic rollback.
By LACS ProjectLicense: MIT1.1k GitHub starsUpdated 15 hours ago
Directory evidence
- Runtimes
- Codex
- Parsed components
- 1 skill or MCP entry
- Source updated
- Sep 23, 2026
- Manifest status
- Canonical path parsed
The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →
Install sysknife for Codex
codex plugin marketplace add hashgraph-online/awesome-codex-plugins
codex plugin marketplace upgrade awesome-codex-plugins
codex plugin add sysknife@awesome-codex-pluginsPaste and run these commands in a terminal with Codex. They add and refresh the awesome-codex-plugins catalog, then install this plugin.
Compatibility: the page URL and API slug “sysknife” remain stable.
- Codex:
sysknife@agent-plugin-marketplace→sysknife@awesome-codex-plugins
The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.
Get the source manually
git clone https://github.com/hashgraph-online/awesome-codex-pluginsClone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/lacs-project/sysknife/.
Plugin files
├── .codex-plugin/plugin.json└── .mcp.json
MCP servers1
- command
- sysknife
- args
- mcp-server
Plugin manifests1
{
"name": "sysknife",
"version": "0.20.1",
"description": "Linux sysadmin co-pilot as an MCP server: plain-language requests become typed, risk-classified actions that a privileged daemon runs only after out-of-band terminal approval, with an Ed25519-signed audit chain and automatic rollback.",
"repository": "https://github.com/lacs-project/sysknife",
"homepage": "https://lacs-project.github.io/sysknife/",
"author": {
"name": "LACS Project",
"url": "https://github.com/lacs-project"
},
"license": "MIT",
"keywords": [
"linux",
"sysadmin",
"mcp",
"codex",
"audit",
"approval",
"devops"
],
"interface": {
"displayName": "SysKnife",
"shortDescription": "Run Linux admin tasks from Codex behind a typed approval gate",
"longDescription": "SysKnife turns a plain-language request into a plan of typed, risk-classified actions. Nothing executes on the model's word: the privileged daemon is the only component that runs anything, it refuses any action outside its catalogue, and medium- and high-risk steps require a single-use approval receipt minted out-of-band by a human running `sysknife approve` in a terminal. Every authorisation decision, and every approval grant, consumption and revocation, is recorded in Ed25519-signed forward hash chains that a third party can verify with only the exported public key. Failed system updates roll back automatically on atomic-host distros.",
"developerName": "LACS Project",
"category": "DevOps",
"capabilities": [
"Read",
"Write"
],
"defaultPrompt": [
"What is using disk space on this machine?",
"Install ripgrep",
"Show me what SysKnife has run recently",
"Verify the audit chain"
],
"brandColor": "#FF6B1A",
"composerIcon": "./assets/raster/sysknife-256.png",
"logo": "./assets/logo/sysknife.svg"
},
"mcpServers": "./.codex-plugin/mcp.json"
}For maintainers
If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.
[sysknife on Agent Plugins Marketplace](https://pluginsmp.com/plugins/sysknife)