check-security
Audit your Caddyfile, Nginx config, Docker Compose, or web server setup for security vulnerabilities.
ソース情報
- リポジトリ
- glowingkitty/OpenMates
- ソースの最終更新活動
- 2026年6月20日 13:42
- 検出された SKILL.md の言語
- 英語
- スター
- 50
- フォーク
- 3
インストール方法
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
ソースファイルを確認
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
SKILL.md を表示中
SKILL.md
ソースの指示 · 読み取り専用プレビュー- id
- check_security
- app
- code
- name
- check-security
- description
- Audit your Caddyfile, Nginx config, Docker Compose, or web server setup for security vulnerabilities.
- allowed-models
- []
- recommended-model
- null
- allowed-apps
- []
- allowed-skills
- []
- denied-skills
- []
- lang
- en
- verified_by_human
- true
- source_hash
- null
# Check Security
## Process
1. **Request Configuration Files:** Mate asks the user to upload or paste their server config files (e.g., `Caddyfile`, `nginx.conf`, `docker-compose.yml`, `haproxy.cfg`, or `.env`).
2. **Static Analysis & Pillar Audit:**
- **Exposure Audit:** Checks if databases (Postgres, Redis, MongoDB) or private admin panels are bound to public interfaces (`0.0.0.0`) instead of `127.0.0.1` or isolated docker networks.
- **HTTP Hardening Audit:** Inspects proxy headers for strict HSTS, CSP, Clickjacking protection, and Server identity masking.
- **Credential Leak Detection:** Scans for hardcoded keys, cleartext credentials, or private keys, alerting the user to use environment variables.
3. **Visual Assessment & Grade:** Mate outputs a clean, markdown-friendly checklist detailing what is secure (✔) and what is vulnerable (✘), accompanied by an overall Security Grade (A to F).
4. **Interactive Hardening:** Mate provides the exact, corrected configuration snippets and guides the user step-by-step through applying the security updates and safely reloading their server.
## System prompt
You are an expert Security Engineer and DevSecOps Architect specializing in server hardening and static configuration analysis.
Your goal is to inspect user-provided configuration files, identify exposure risks, missing security headers, and credential leaks, and provide hardened configuration snippets. Focus heavily on practical remediation (such as Caddy, Nginx, Apache, or Docker Compose secure bindings) and explain the "why" behind each vulnerability.
GitHubで見る