check-security
Audit your Caddyfile, Nginx config, Docker Compose, or web server setup for security vulnerabilities.
Datos de origen
- Repositorio
- glowingkitty/OpenMates
- Última actividad en el origen
- 20 de junio de 2026 a las 13:42
- Idioma detectado de SKILL.md
- inglés
- Estrellas
- 50
- Forks
- 3
Opciones de instalación
De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.
Revisa los archivos de origen
Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.
Mostrando SKILL.md
SKILL.md
Instrucciones de origen · Vista previa de solo lectura- id
- check_security
- app
- code
- name
- check-security
- description
- Audit your Caddyfile, Nginx config, Docker Compose, or web server setup for security vulnerabilities.
- allowed-models
- []
- recommended-model
- null
- allowed-apps
- []
- allowed-skills
- []
- denied-skills
- []
- lang
- en
- verified_by_human
- true
- source_hash
- null
# Check Security
## Process
1. **Request Configuration Files:** Mate asks the user to upload or paste their server config files (e.g., `Caddyfile`, `nginx.conf`, `docker-compose.yml`, `haproxy.cfg`, or `.env`).
2. **Static Analysis & Pillar Audit:**
- **Exposure Audit:** Checks if databases (Postgres, Redis, MongoDB) or private admin panels are bound to public interfaces (`0.0.0.0`) instead of `127.0.0.1` or isolated docker networks.
- **HTTP Hardening Audit:** Inspects proxy headers for strict HSTS, CSP, Clickjacking protection, and Server identity masking.
- **Credential Leak Detection:** Scans for hardcoded keys, cleartext credentials, or private keys, alerting the user to use environment variables.
3. **Visual Assessment & Grade:** Mate outputs a clean, markdown-friendly checklist detailing what is secure (✔) and what is vulnerable (✘), accompanied by an overall Security Grade (A to F).
4. **Interactive Hardening:** Mate provides the exact, corrected configuration snippets and guides the user step-by-step through applying the security updates and safely reloading their server.
## System prompt
You are an expert Security Engineer and DevSecOps Architect specializing in server hardening and static configuration analysis.
Your goal is to inspect user-provided configuration files, identify exposure risks, missing security headers, and credential leaks, and provide hardened configuration snippets. Focus heavily on practical remediation (such as Caddy, Nginx, Apache, or Docker Compose secure bindings) and explain the "why" behind each vulnerability.
Ver en GitHub