code-server-remote-ide-wsl2
Sets up a secure VS Code IDE in the browser on WSL2, enabling remote development from any device with full IDE features.
Install this skill
Security score
The code-server-remote-ide-wsl2 skill was audited on Feb 12, 2026 and we found 48 security issues across 5 threat categories, including 23 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
System command execution
| 788 | - ⚠️ Compromised WSL2 system (if system compromised, IDE access is too) |
Ngrok tunnel reference
| 3 | description: Setup secure VS Code IDE in browser with code-server on WSL2, accessible from mobile/tablet via ngrok/Cloudflare/Tailscale. Full IDE features with extension support, resource management, |
Ngrok tunnel reference
| 8 | Access full VS Code IDE from any device (phone, tablet, remote computer) via secure web-based code-server with ngrok, Cloudflare Tunnel, or Tailscale. |
Ngrok tunnel reference
| 15 | - Establishes encrypted tunnel (ngrok/Cloudflare/Tailscale) |
Ngrok tunnel reference
| 80 | - Choose tunnel service (ngrok recommended for beginners) |
Ngrok tunnel reference
| 140 | - **ngrok** (recommended for beginners): 1GB/month free, ephemeral URLs |
Ngrok tunnel reference
| 149 | **ngrok** - Best for beginners: |
Ngrok tunnel reference
| 173 | **For ngrok**: |
Ngrok tunnel reference
| 174 | 1. Go to https://dashboard.ngrok.com/signup |
Ngrok tunnel reference
| 176 | 3. Copy your authtoken from https://dashboard.ngrok.com/get-started/your-authtoken |
Ngrok tunnel reference
| 177 | 4. Run: `ngrok config add-authtoken YOUR_TOKEN_HERE` |
Ngrok tunnel reference
| 197 | ngrok version # or: cloudflared --version # or: tailscale version |
Ngrok tunnel reference
| 353 | 5. **Start tunnel** (ngrok/cloudflare/tailscale) |
Ngrok tunnel reference
| 369 | https://abc123.ngrok-free.app |
Ngrok tunnel reference
| 426 | 3. **Accept any security warnings** (ngrok free tier shows warning page - click "Visit Site") |
Ngrok tunnel reference
| 638 | - **Saves data** (ngrok free tier: 1GB/month limit) |
Ngrok tunnel reference
| 644 | - Forcefully kill: `pkill -9 code-server && pkill -9 ngrok` |
Ngrok tunnel reference
| 668 | https://abc123.ngrok-free.app |
Ngrok tunnel reference
| 740 | - All traffic encrypted via tunnel (ngrok/Cloudflare/Tailscale) |
Ngrok tunnel reference
| 807 | **⚠️ ngrok Free Tier Warning**: |
Ngrok tunnel reference
| 808 | ngrok free tier URLs are public. However: |
Ngrok tunnel reference
| 812 | - **Recommendation**: Don't share ngrok URLs publicly |
Ngrok tunnel reference
| 829 | - Cloudflare often faster than ngrok |
Ngrok tunnel reference
| 974 | - **[Tunneling Options Guide](references/tunneling-options.md)** - Comprehensive comparison of ngrok vs Cloudflare vs Tailscale, setup for each |
Ngrok tunnel reference
| 991 | ./install.sh --ngrok # Non-interactive: install with ngrok |
Ngrok tunnel reference
| 1123 | - [x] Tunnel service installed (ngrok/Cloudflare/Tailscale) |
Access to hidden dotfiles in home directory
| 74 | cd ~/.claude/skills/code-server-remote-ide-wsl2/scripts |
Access to hidden dotfiles in home directory
| 132 | cd ~/.claude/skills/code-server-remote-ide-wsl2/scripts |
Access to hidden dotfiles in home directory
| 217 | cd ~/.claude/skills/code-server-remote-ide-wsl2/scripts |
Access to hidden dotfiles in home directory
| 242 | ~/.config/code-server/config.yaml |
Access to hidden dotfiles in home directory
| 251 | - Hashed password stored in `~/.config/code-server/config.yaml` with 600 permissions |
Access to hidden dotfiles in home directory
| 252 | - Plain password stored in `~/.code-server/.env` (for scripts only) |
Access to hidden dotfiles in home directory
| 282 | cd ~/.claude/skills/code-server-remote-ide-wsl2/scripts |
Access to hidden dotfiles in home directory
| 344 | cd ~/.claude/skills/code-server-remote-ide-wsl2/scripts |
Access to hidden dotfiles in home directory
| 602 | cd ~/.claude/skills/code-server-remote-ide-wsl2/scripts |
Access to hidden dotfiles in home directory
| 655 | cd ~/.claude/skills/code-server-remote-ide-wsl2/scripts |
Access to hidden dotfiles in home directory
| 1054 | cp templates/code-server.service ~/.config/systemd/user/ |
Access to .env file
| 252 | - Plain password stored in `~/.code-server/.env` (for scripts only) |
Access to .env file
| 751 | - Plain password in .env for scripts only (600 permissions) |
Access to .env file
| 1062 | **File**: `templates/.env.template` |
Access to .env file
| 1064 | Example .env configuration (created by `configure-auth.sh`): |
Prompting for password/secret input
| 430 | You'll see code-server password prompt: |
External URL reference
| 174 | 1. Go to https://dashboard.ngrok.com/signup |
External URL reference
| 176 | 3. Copy your authtoken from https://dashboard.ngrok.com/get-started/your-authtoken |
External URL reference
| 180 | 1. Go to https://dash.cloudflare.com/ |
External URL reference
| 185 | 1. Go to https://login.tailscale.com/start |
External URL reference
| 369 | https://abc123.ngrok-free.app |
External URL reference
| 668 | https://abc123.ngrok-free.app |