Omahub
← All plugins
�

OmaSSH

by Šahzudin Mahmić

Search SSH hosts from your OpenSSH config and connect from the Omarchy bar.

GitHub

Security review

No obvious issues detected

Deterministic scan — not a security guarantee

None
Risk level
None
Analyzed commit
a8a4f14
Scanned
1 month ago

No potentially dangerous behavior detected in the analyzed commit.

Automated analysis only — not a security guarantee.

AI advisory review

No obvious issues detected

Language-model assessment · ~deepseek/deepseek-v4-flash-latest — advisory only

Low
AI risk level
Low
Recommendation
install
Model
~deepseek/deepseek-v4-flash-latest
Analyzed commit
a8a4f14
Reviewed
1 month ago

The plugin is a straightforward SSH host launcher that reads the user's SSH config and launches terminals with the selected alias. It uses safe argument-array process execution, writes only a private recent-host file with 0600 permissions, and contains no obfuscated or suspicious code. The deterministic scan found no issues.

How this check works

This review combines the deterministic scan (the rule-based results above) with an independent look at the plugin's code by a language model. The model reads a trimmed sample of the repository's files, the manifest, and the README, then gives a plain-language risk level and a recommendation: install (no notable danger), review (look closer first), or avoid (clearly dangerous).

It runs on the same analyzed commit as the deterministic scan and is strictly advisory — it is not a security guarantee and never blocks a plugin by itself. A human moderator still reviews plugins before they are listed.

AI advisory only — automated analysis, not a security guarantee.

Install
$ omarchy plugin add https://github.com/sahzudin/omassh --enable
Widgets #bar #quickshell #launcher

OmaSSH

OmaSSH is a small, read-only SSH launcher for the Omarchy bar. Click the server icon, type part of an alias, hostname, or user, and press Enter to connect in your configured Omarchy terminal.

OmaSSH open on the Omarchy bar

It uses your OpenSSH configuration as the source of truth. Connections are launched as ssh -- <alias>, so OpenSSH still applies identity files, ProxyJump, forwarding, Match rules, and every other option in the config.

Features

  • Reads literal Host aliases from ~/.ssh/config.
  • Follows globbed Include directives.
  • Fuzzy-searches aliases, hostnames, users, ports, and jump hosts.
  • Opens the selected connection in Omarchy's configured terminal.
  • Places recently used hosts first without modifying the SSH config.
  • Refreshes when the main config changes and periodically for included files.
  • Uses argument-array process launching; aliases are never interpolated into a shell command.
  • Adapts to the active Omarchy theme and horizontal or vertical bars.

Wildcard patterns such as Host * and Host web-* are intentionally excluded from the list because they describe rules rather than directly selectable destinations.

Requirements

  • Omarchy Quattro with the Quickshell plugin system.
  • Python 3 using only the standard library.
  • OpenSSH and Omarchy's configured terminal launcher.

OmaSSH runs entirely as your normal user account and needs no background service, stored credentials, or additional Python packages. It accesses the network only when you deliberately select a host, at which point the normal OpenSSH client handles the connection.

Install

Use Omarchy's normal plugin workflow:

omarchy plugin add https://github.com/sahzudin/omassh.git --enable

Plugins execute unsandboxed inside omarchy-shell; review third-party plugin source before installing it.

The widget defaults to the right section. Move it at any time with:

omarchy bar move io.github.sahzudin.omassh --section right

Right-click the bar icon to refresh immediately. The popup supports fuzzy typing, Up/Down selection, Enter to connect, and Escape to clear or close.

Configuration

Open Omarchy's bar settings to change:

  • configPath: defaults to ~/.ssh/config.
  • refreshIntervalSec: polling interval for included config files; defaults to 30 seconds.
  • maxHosts: maximum number loaded into the panel; defaults to 200.

Recent connections are stored at ${XDG_STATE_HOME:-~/.local/state}/omassh/recent.json with mode 0600. OmaSSH never writes to your SSH config.

Remove

omarchy plugin remove io.github.sahzudin.omassh

Removing the plugin leaves its small recent-host history in place so a later reinstall can reuse it. Delete ~/.local/state/omassh/recent.json as well if you want to remove that optional local state.

Development

Run the parser tests and Omarchy manifest validator:

make test
make validate

For live QML development, copy the plugin into ~/.config/omarchy/plugins/io.github.sahzudin.omassh/ and let Omarchy's plugin watcher reload edits. The runtime files are manifest.json, Panel.qml, Model.js, and bin/omassh-hosts.

License

MIT