Introducing Agents.·Read
OverviewAgentsWorkflowsExecutionDeveloper ToolsSecurityLibrary
Updated Oct 16, 2026

Utilities

Fingerprint SSH public keys with OpenSSH

ssh-key-fingerprint is an SSH public-key fingerprinting node powered by OpenSSH.

Agent
Compare public keysInventory key algorithmsLocate invalid key lines

overview

What ssh-key-fingerprint does

Supply public key lines from .pub or authorized_keys-style text. Each line is fingerprinted separately with ssh-keygen, returning key type, size, SHA256 and MD5 fingerprints and the line comment. Blank lines and comments are skipped; invalid key lines remain explicit results.

The file limit is 1 MiB and 1 to 1000 key lines. A file containing PRIVATE KEY fails the operation. No private keys are processed, and no keys are generated, signed or converted. Fingerprint output makes no network request.

Malformed public key lines produce valid: false rows. A PRIVATE KEY marker fails the whole input. Blank lines and comments are omitted.

This operation uses 9.2p1. Upstream license: BSD-style (OpenSSH). The source link identifies the program used by this node.

source github.com/openssh/openssh-portable/tree/V_9_2_P1

use cases

Where ssh-key-fingerprint fits

Compare public keys

Compare SHA256 fingerprints from supplied public keys.

Inventory key algorithms

Read native key types and bit sizes without contacting a server.

Locate invalid key lines

Keep invalid line numbers alongside valid key results.

reference

ssh-key-fingerprint inputs and flags

1 inputs
NameTypeFlagDescription
inputFILE--inputPublic key text, including .pub and authorized_keys-style lines. Up to 1000 key lines and 1 MiB; blank/comment lines skipped, invalid lines reported, private-key material refused.

Showing key inputs. ssh-key-fingerprint exposes 1 inputs in total.

example

Run ssh-key-fingerprint

ssh-key-fingerprint · command
python3 /app/run.py --input ./input.txt ./output
sample output
{"line": 3, "valid": false, "error": "not a valid public key line"}

guidance

Choosing ssh-key-fingerprint

Use fingerprints to compare public keys or inventory supplied authorized_keys entries. The result does not prove ownership, authorization or whether a server accepts the key.

ssh-keygen

The upstream CLI exposes additional key operations; this node only fingerprints public key lines.

faq

ssh-key-fingerprint questions

input: Public key text, including .pub and authorized_keys-style lines. Up to 1000 key lines and 1 MiB; blank/comment lines skipped, invalid lines reported, private-key material refused.

JSONL key fingerprints. Malformed public key lines produce valid: false rows. A PRIVATE KEY marker fails the whole input. Blank lines and comments are omitted.

The file limit is 1 MiB and 1 to 1000 key lines. A file containing PRIVATE KEY fails the operation. No private keys are processed, and no keys are generated, signed or converted. Fingerprint output makes no network request.

Use fingerprints to compare public keys or inventory supplied authorized_keys entries. The result does not prove ownership, authorization or whether a server accepts the key.

The image repository also contains a digest-bound source/notices artifact. Download it with oras pull docker.io/nenadzaric/skills-intel-ssh-key-fingerprint@sha256:7621f658ebd78e096d7704a2d64a5306c6a433673d89211e0d37b3178e119f88. The bundle includes the build recipe, licenses, copied notices and component-source directions. Bundle SHA256: 38dcb91c631570c8b55db7fc84242a9871d5e4ffa056f7592901d053c6188052. Follow its source directions for upstream archives and patches. Image and source/notices repository.

related

More Utilities tools

  1. browser-fetch

    Headless Chromium render: requested URL, final URL, status, and title next to the page.

  2. cewl

    Spider a URL and return a wordlist for password crackers.

  3. csvkit

    SQL on one CSV. The table name is the file stem.

  4. dnsgen

    Wordlist and mined-word subdomain permutation.

  5. duckdb

    In-process SQL on CSV, JSON, and Parquet. No server.

  6. edge-tts

    Microsoft Edge neural speech from text or a script file. No API key.

Run ssh-key-fingerprint yourself

The synthetic run checks jsonl key fingerprints. The excerpt shows selected native fields asserted by saved passing platform verifier; reconstructed excerpt, not full raw artifact. The command shown is the container entrypoint with example paths, not a host-installed CLI command.

Open ssh-key-fingerprint in the libraryBuild a workflow with it

Facts on this page come from the live Trickest tool library.