Run exactly one command over SSH on the fixed target ubuntu@203.0.113.10 and nothing else. This tool cannot reach any other host, cannot run local commands, and cannot touch the local filesystem directly - the only thing it can ever do is relay one command over SSH to that one account on that one machine, which is fixed by whoever deployed this server, not something you (the model) can choose. Standing rule: always show the user the exact command in chat and get their explicit go-ahead BEFORE calling this tool. Call it with confirmed=false (or omit confirmed) to preview what would run without executing anything. Only call it with confirmed=true after the user has approved this specific command in this specific turn - never assume consent from an earlier, different command.