核心就几个：

执行命令，返回 stdout/stderr
上传下载文件
获取服务器基本状态（cpu、内存、磁盘、文件列表之类）
全程密钥不出 XTerminal，AI 只发指令，XTerminal 替它跑。

说白了就是做个中间层，既能用 AI 又不暴露敏感信息。

一个新的ssh工具 Termark 已经有这个功能了，可以参考下

---
name: termark
description: This skill should be used when the user asks to "connect to a server", "SSH into a machine", "run a command on a remote host", "list SSH assets", "upload/download files to a server", or mentions the `termark` CLI. Use `termark` instead of running `ssh`, `scp`, or `sftp` directly.
---

# Termark CLI

Use the `termark` CLI to manage SSH assets, run one-off commands, and transfer files through the user's running Termark desktop app.

Prefer `termark` over running `ssh`, `scp`, or `sftp` directly.
Run `termark --help` to discover commands. The CLI outputs JSON when piped.

## Common Workflow

```bash
termark assets list -q <keyword> --json
termark exec <asset-id> -- <command>
termark upload <asset-id> <local-path> <remote-path>
termark download <asset-id> <remote-path> <local-path>

File Transfer

termark upload <asset-id> ./dist /tmp/dist
termark upload <asset-id> ./app.tar.gz /tmp/release.tar.gz
termark download <asset-id> /var/log/nginx ./logs/nginx
termark download <asset-id> /tmp/app.tar.gz ./latest.tar.gz

Rules

• Do not ask the user for SSH passwords, private keys, or passphrases. Termark holds those credentials and connects via saved configurations.
• termark exec takes an asset id, opens a temporary SSH connection, runs the command, and closes the connection.
• termark upload takes an asset id, a local file or folder path, and a remote destination path.
• termark download takes an asset id, a remote file or folder path, and a local destination path.
• Destination paths follow scp-style behavior: if the destination exists and is a directory, the source keeps its name inside that directory; otherwise the destination path is used as the final file or folder path.
• Long-running tasks should use tmux/nohup/systemd on the remote host.