name	server-security
description	服务器安全审计与加固。扫描 SSH、防火墙、端口暴露、文件权限、暴力破解等安全问题，生成报告并提供一键修复。当用户说服务器安全、安全审计、安全检查、安全加固时使用
allowed-tools	Bash, AskUserQuestion
metadata	{"argument-hint":"<ssh连接串> 如 root@1.2.3.4"}

Server Security Audit

Use this skill for server security audits and reversible hardening plans across SSH, firewall, users, services, file permissions, and update posture.

Start here to confirm scope, safety boundaries, and the minimum workflow.
Load references/full-guide.md before executing detailed commands, applying templates, or relying on examples from this skill.
Keep the work limited to the user-requested target; do not add adjacent improvements unless the user asks.

Confirm the target, available context, constraints, and done-when signal.
Read the relevant section of references/full-guide.md for task-specific details.
Execute the smallest reversible action that satisfies the request.
Verify with read-only evidence first, then document every applied change with rollback commands and post-change validation.
Report changed files, commands run, evidence collected, and any remaining risk.

references/full-guide.md - complete command patterns, examples, checklists, and edge cases.

name	server-security
description	服务器安全审计与加固。扫描 SSH、防火墙、端口暴露、文件权限、暴力破解等安全问题，生成报告并提供一键修复。当用户说服务器安全、安全审计、安全检查、安全加固时使用
allowed-tools	Bash, AskUserQuestion
metadata	{"argument-hint":"<ssh连接串> 如 root@1.2.3.4"}

Use this skill for server security audits and reversible hardening plans across SSH, firewall, users, services, file permissions, and update posture.

Start here to confirm scope, safety boundaries, and the minimum workflow.
Load references/full-guide.md before executing detailed commands, applying templates, or relying on examples from this skill.
Keep the work limited to the user-requested target; do not add adjacent improvements unless the user asks.

Confirm the target, available context, constraints, and done-when signal.
Read the relevant section of references/full-guide.md for task-specific details.
Execute the smallest reversible action that satisfies the request.
Verify with read-only evidence first, then document every applied change with rollback commands and post-change validation.
Report changed files, commands run, evidence collected, and any remaining risk.

references/full-guide.md - complete command patterns, examples, checklists, and edge cases.

server-security