Skiff v0.5.0-beta.1

Skiff 0.5.0-beta.1 — first public beta

This is a pre-release for testing. Your saved connections and credentials are safe: the first-launch migration is additive and never deletes existing data (it backs originals up first).

What's in it

• 72-bug hardening sprint across SSH, SFTP, auth, and the UI.
• Security: reserved ai: vault namespace + credential-binding migration guard; 8 patched dependency advisories (rustls / webpki / crypto-bigint / ctutils).
• Plus the new split-pane layouts, copy-on-select + middle-click paste, interactive password prompt, and in-app dialogs.

Full detail: CHANGELOG.

🙏 Please stress-test these specifically

1. Windows credential store — saving/loading passwords, the keychain prompt, and paste behavior. (We could not runtime-test this on macOS, so Windows feedback matters most.)
2. 2FA / keyboard-interactive — PAM 2FA, hidden OTP prompts during login.
3. Multi-pane layouts, SFTP transfers, the destructive-command paste guard.

Downloads

• Windows: Skiff_0.5.0-beta.1_x64-setup.exe (installer) or skiff.exe (standalone).
• Linux: .AppImage (portable) or .deb (Debian/Ubuntu).
• macOS: not in this beta build yet — a signed/notarized macOS build can follow if there's demand.

⚠️ The Windows binaries are unsigned, so SmartScreen will show an "unknown publisher" warning — click More info → Run anyway. (Signing is a separate step for a stable release.)

Reporting

Found something? Open an issue at https://github.com/andy060982/skiffSSH/issues and mention beta, your OS, and steps to reproduce.

Skiff v0.4.0

Security-hardening + feature release. macOS build (Apple Silicon / arm64) is Developer ID signed, notarized, and stapled — no Gatekeeper warning on download.

Security

Full remediation of the 2026-09-24 Codex security audit (18 findings): host-key fail-closed + @revoked enforcement; vault secrets and AI keys bound to backend-owned destinations/origins (a compromised UI can't redirect them); symlink-safe downloads; deterministic disconnect + tunnel teardown; atomic, non-destructive file writes; owner-only (0700/0600) transcripts & captures that refuse planted symlinks; resource caps; password kept in Zeroizing throughout; cargo audit in CI.

Added

• Transfer panel with per-file failure list + retry
• Right-click sidebar → New Connection / New Folder
• Capture command output to a file
• Interactive keyboard-interactive auth (OTP / 2FA / challenge prompts) — password stays backend-side; Cancel truly aborts

Fixed

• SFTP handle exhaustion on large recursive transfers

Windows and Linux binaries are produced by CI. See CHANGELOG.md for detail.

Skiff v0.3.1

Skiff v0.3.1 — security hardening.

Acts on an external security audit of the SSH engine and file handling. No new
UI beyond one opt-in convenience; recommended for all users.

Security

• Host keys: a known host that presents a different-algorithm key is now
  refused (shown as a changed key, with the line number), instead of being
  offered the ordinary first-connection trust prompt — closing a downgrade /
  interception gap. If a host you trust legitimately negotiates a new key type,
  remove its line from known_hosts and reconnect to re-trust.
• Disconnect now really tears the connection down — the session and remote
  shell no longer keep running after you close the tab.
• Downloads refuse to write through a symlink and write to a temp file then
  atomically rename, so a failed or cancelled transfer never destroys the
  existing file.
• Config snapshots fail on timeout / truncation / non-zero exit instead of
  saving a partial capture; key install only reports success when every
  step actually succeeded.
• Hardening: crafted log filenames can no longer crash the app; key generation
  is race-free and writes 0600; config-dir names can't traverse; the network
  tools reject option-injection targets; the host catalogue saves atomically.
• AI: API keys are only sent over HTTPS to remote endpoints (local Ollama /
  LM Studio on localhost still use plain HTTP); clearer message when the Claude
  CLI isn't logged in.

Added

• Mouse-wheel scroll in tmux — an opt-in on-connect preset (Edit host → On
  connect). Enables tmux mouse mode so the wheel scrolls the buffer instead of
  shell history. Note: it's a server-wide tmux setting; hold Shift to select
  text normally.

Under the hood

• macOS build is now verified in CI on every change (Windows / Linux / macOS).

Downloads

• Windows: Skiff_0.3.1_x64-setup.exe (installer) or skiff.exe (portable)
• Linux: Skiff_0.3.1_amd64.AppImage or skiff_0.3.1_amd64.deb

Windows binaries are unsigned; SmartScreen will warn on first run — More info →
Run anyway.

Skiff v0.3.0

Skiff v0.3.0 — settings + safety.

Adds an app Settings dialog and turns host colors from a cosmetic tag into a
configurable safety layer.

Host-color policies (customizable)

Open menu → Settings. Each color now carries a policy you set:

• AI on/off — pick which colors disable the assistant (the old "red disables
  AI" is now just the default, not a hardcoded rule).
• Confirm on connect — prompt before dialing a host of that color.
• Exclude from broadcast — keep that color out of broadcast-to-panes.

A host's own AI toggle still overrides its color, and uncolored hosts inherit
their folder's color.

Safety

• Dangerous-command guard — warns before a paste, snippet, or broadcast
  containing rm -rf, reload, write erase, mkfs, a fork bomb, and similar.
• Confirm closing a live tab — no more accidentally killing a connected
  session.

Productivity

• Device-type profiles — a Host Editor dropdown (PAN-OS / Cisco IOS / Junos /
  Linux) fills the on-connect and config-capture commands in one pick.
• Subnet-aware host filter — type 10.20.0.0/16 in host search to match by
  IP subnet.
• Rename tab (tab right-click), terminal font zoom (Ctrl +/-, Ctrl+0).

Fixes

• The AI panel now explains when the Claude CLI isn't logged in (run claude
  once to authenticate) instead of showing a bare "exit code 1".

Downloads

• Windows: Skiff_0.3.0_x64-setup.exe (installer) or skiff.exe (portable)
• Linux: Skiff_0.3.0_amd64.AppImage or skiff_0.3.0_amd64.deb

Windows binaries are unsigned; SmartScreen will warn on first run — More info →
Run anyway.

Skiff v0.2.2

Skiff v0.2.2 — security update.

Upgrades the SSH engine russh 0.54 → 0.63.3, clearing a batch of RUSTSEC /
Dependabot advisories (unbounded allocation, pre-auth panics, and unbounded
message/banner parsing). These are DoS-class issues exploitable only by the
server you connect to — no code execution or credential disclosure — and the
server-only advisories don't apply since Skiff is a client. Recommended for all
users.

No feature or UI changes. All auth methods (password / key / agent /
keyboard-interactive), ProxyJump, and port forwarding were retested against
real servers.

Downloads

• Windows: Skiff_0.2.2_x64-setup.exe (installer) or skiff.exe (portable)
• Linux: Skiff_0.2.2_amd64.AppImage or skiff_0.2.2_amd64.deb

Windows binaries are unsigned; SmartScreen will warn on first run — More info →
Run anyway. Next up (v0.3.0): customizable host-color policies + subnet-aware
sidebar filter.

Skiff v0.2.1

Skiff v0.2.1 — Host Editor fixes, AI thread persistence, and richer host colors.

Host Editor

• Advanced commands box is typeable — it no longer stripped spaces and new
  lines on every keystroke.
• {pane} is preserved when editing a host (it used to freeze to skiff-1),
  and the tmux/screen preset checkbox now matches correctly.
• Preset toggle is idempotent + de-dupes on save — enabling a preset can no
  longer stack duplicate on-connect commands (which caused nested-tmux warnings).
• Save reports missing required fields instead of silently doing nothing.
• Snippet slot label corrected to Ctrl+Shift+.

AI assistant

• Conversations persist per session — switching panes/sessions and coming
  back keeps that session's thread; no more re-asking. Still no cross-host bleed,
  and a reply lands in the session it started in even if you switch away.

Host colors

• Palette expanded to 10 colors (added orange, lime, cyan, pink, slate).
• The per-host accent now shows in the sidebar — a colored bar and tinted
  icon on the host row — not just as a frame on the active terminal.
• Folders can have colors (right-click a folder → Set color), and a host
  inherits its folder's color when it has none of its own — including the
  wrong-window frame and the AI-off default for red.

Downloads

• Windows: Skiff_0.2.1_x64-setup.exe (installer) or skiff.exe (portable)
• Linux: Skiff_0.2.1_amd64.AppImage or skiff_0.2.1_amd64.deb

Windows binaries are unsigned; SmartScreen will warn on first run — More info →
Run anyway. Next up: nested split layouts (a pane full-height beside two stacked).

Skiff v0.2.0

Skiff v0.2.0 — Linux support.

Skiff now runs on Linux alongside Windows, from one cross-platform codebase.
Same terminal, SFTP, tunnels, and network tools — with the OS-specific pieces
(credential vault, SSH agent) abstracted per platform.

New

• Linux builds — .AppImage (universal, no install) and .deb (Debian/Ubuntu).
• Secrets use the freedesktop Secret Service (GNOME Keyring / KWallet) on Linux,
  the Windows Credential Manager on Windows.
• SSH agent reads $SSH_AUTH_SOCK on Linux; the Windows OpenSSH pipe + Pageant
  on Windows.
• Releases are now built and published by CI on both platforms.

Downloads

• Windows — Skiff_0.2.0_x64-setup.exe (installer) or skiff.exe (portable)
• Linux — Skiff_0.2.0_amd64.AppImage (chmod +x and run) or skiff_0.2.0_amd64.deb

Windows binaries are unsigned; SmartScreen will warn on first run — More info →
Run anyway. macOS is next on the roadmap.

Skiff v0.1.1

Skiff v0.1.1 — hardening release from a full code review.

No new features; a pass of safety and robustness fixes across SFTP, the
terminal, and the AI panel. Recommended for all v0.1.0 users.

Fixes

• SFTP overwrite guard now covers Explorer drag-and-drop — dragging a file
  from Windows Explorer onto the remote pane could silently overwrite an
  existing file; it now prompts, like every other transfer.
• Files pane is keyed per session — switching tabs in Files view can no
  longer leave a stale directory that a transfer might target.
• Terminal paste uses bracketed-paste framing — a multi-line clipboard
  payload is delivered inert for review instead of auto-running line by line
  when the remote app supports it.
• Recursive transfers are bounded — a malicious or misconfigured server
  advertising a pathologically deep/wide tree can no longer grow the transfer
  worklist without limit.
• Stricter download filename validation — rejects both path separators,
  ./.., drive-letter :, and Windows reserved device names (CON, NUL,
  COM1–9, LPT1–9).
• AI panel — explicit send-guard so a red/production host can never have
  its context sent to a provider; fixed an event-listener leak on the error
  path; the conversation now resets per host (no cross-host context bleed).
• Robustness — the log-prune background thread is panic-guarded; a corrupt
  hosts.json is backed up to hosts.json.corrupt before falling back to
  defaults; a failed host export now reports instead of failing silently.

Downloads

• Skiff_0.1.1_x64-setup.exe — installer (per-user, no admin). Recommended.
• skiff.exe — portable single file.

Binaries are unsigned; SmartScreen will warn on first run — More info →
Run anyway. Windows 10/11.

Skiff v0.1.0

Skiff v0.1.0 — the first public release.

A fast, small (~6.5 MB) SSH terminal and SFTP client for Windows, built for
network and systems administrators.

Highlights

• Terminal — split panes, broadcast-to-panes, per-host snippet hotkeys, find in scrollback, right-click paste
• Auth — password, private key (with in-app keygen + one-click install), SSH agent, and keyboard-interactive (TACACS+ gear)
• Tunnels — ProxyJump, local (-L) and SOCKS5 dynamic (-D) forwarding
• Files — dual-pane SFTP, drag-and-drop (including pane-to-pane), recursive transfers, rename/delete/mkdir
• Network tools — ping, traceroute, port check, DNS, and a reachability sweep — for when SSH can't connect
• Config snapshots — capture a device's config and diff any two
• AI assistant (optional, advisor-only) — Anthropic / OpenAI-compatible / Ollama / LM Studio / Claude Code CLI
• Security-first — secrets in Windows Credential Manager, host-key pinning, changed-key refusal, per-host accent colors

Downloads

• Skiff_0.1.0_x64-setup.exe — installer (per-user, no admin, auto-installs WebView2 if missing). Recommended.
• skiff.exe — portable single file.

The binaries are unsigned, so SmartScreen will warn on first run — choose
More info → Run anyway. Signing is on the roadmap.

Windows 10/11. See the README for full feature docs and the security model.