| name | server-security |
| description | 服务器安全审计与加固。扫描 SSH、防火墙、端口暴露、文件权限、暴力破解等安全问题，生成报告并提供一键修复。当用户说服务器安全、安全审计、安全检查、安全加固时使用 |
| allowed-tools | Bash, AskUserQuestion |
| metadata | {"argument-hint":"<ssh连接串> 如 root@1.2.3.4"} |
Server Security Audit
Use this skill for server security audits and reversible hardening plans across SSH, firewall, users, services, file permissions, and update posture.
Routing
- Start here to confirm scope, safety boundaries, and the minimum workflow.
- Load
references/full-guide.md before executing detailed commands, applying templates, or relying on examples from this skill.
- Keep the work limited to the user-requested target; do not add adjacent improvements unless the user asks.
Quick Workflow
- Confirm the target, available context, constraints, and done-when signal.
- Read the relevant section of
references/full-guide.md for task-specific details.
- Execute the smallest reversible action that satisfies the request.
- Verify with read-only evidence first, then document every applied change with rollback commands and post-change validation.
- Report changed files, commands run, evidence collected, and any remaining risk.
References
references/full-guide.md - complete command patterns, examples, checklists, and edge cases.
