devopsby automateyournetwork
RADKit Remote Device Access
automateyournetwork/radkit-remote-access
Cisco RADKit — cloud-relayed remote device access, CLI execution, SNMP polling, device inventory discovery, attribute inspection.
What it changes
Passed 17 of 20 test cases with the skill, and 8 of 20 without it.
Without skill39%
With skill87%
Checks it passed that the model alone missed
- Specifies the environment variable RADKIT_CA_B64
- Specifies the environment variable RADKIT_KEY_B64
- Specifies the environment variable RADKIT_CERT_B64
and 8 more in the full report
11 fixed9 passed either way3 still failing0 broke
- Pass-rate lift
- +48 pp
- Tokens
- +97%
- Agent turns
- 0%
- Response time
- -55%
Model gemini-3.6-flashMeasured 8/16/2026v120 of 23 cases passed with skill · 20 comparable
See it in action
One of 11 test cases the skill fixed. Same model, same prompt, with and without the skill.
PromptWhich primary environment variable defines the user email identity required to authenticate the RADKit client process?
What was checked, without and with the skill| Checked | Without skill | With skill |
|---|
| Specifies the environment variable RADKIT_IDENTITY | Missed | Passed |
|---|
What's inside
The instructions your model reads when the skill loads.
SKILL.md176 linessingle file
RADKit Remote Device Access
MCP Server
- Repository: CiscoDevNet/radkit-mcp-server-community
- Transport: stdio (Python via FastMCP), SSE, or HTTPS
- Requires:
RADKIT_IDENTITY, RADKIT_DEFAULT_SERVICE_SERIAL, active RADKit service instance
- Python: 3.10+
How RADKit Works
RADKit provides a cloud-relayed path to on-premises devices:
NetClaw Agent --> RADKit Cloud --> RADKit Service (on-prem) --> Device (CLI/SNMP)
- The RADKit Service runs inside the network perimeter, onboarded with access to devices
- The RADKit Client (this MCP server) authenticates via certificate-based identity
- All communication is encrypted, relayed through Cisco's RADKit cloud infrastructure
- No direct SSH/SNMP from the agent host to the devices is needed
This is ideal for:
- Air-gapped networks where the AI agent cannot directly SSH to devices
- Cloud-hosted agents that need to reach on-premises devices
- Multi-site operations where a single RADKit service provides access to many devices
- Secure environments where certificate-based auth is required (no passwords in transit)
MCP Tools
Tool Details
Track record
Benchmark
17 / 20
test cases passed, vs 8 / 20 without
Adoption
- Users
- 0
- Times used
- 0
Safety and source details
SkillSafety
✓ 3 of 3 passed✓Code scan15 of 15 checks clean
0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026
View 15 scanner checks
live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing
✓IntentSafe
LLM judge · does the skill do what it claims
✓ContentClean
LLM judge · policy & harmful-content review
Source
Importedautomateyournetwork / netclaw
workspace/skills/radkit-remote-access/SKILL.md
License Apache-2.0Imported 8/3/2026Version v1