菜单
Surgical scrubbing and hardening of a used or fresh VPS to ensure a zero-trust, clean environment.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Durable knowledge-vault reference for the Prismtek/Buddy talking-host lip-sync workflow.
Configure, extend, or contribute to Hermes Agent.
Use when reviewing betting-model pipelines, sports prediction datasets, backtests, expected value math, and model-risk controls without placing bets.
Use when planning, drafting, repurposing, and promoting content across YouTube, X, and Twitch while keeping posting, DMs, replies, deletions, and account changes approval-gated.
Use when turning approved bookmarks and linked articles into ranked research digests, summaries, and next actions using read-only browser or API adapters.
Use when preparing concise pre-call context briefs from approved notes, prior conversations, public signals, project status, and open questions.
| name | vps-hardening |
| description | Surgical scrubbing and hardening of a used or fresh VPS to ensure a zero-trust, clean environment. |
| version | 1.1.0 |
| author | Hermes Agent |
| license | MIT |
| platforms | ["linux"] |
| metadata | {"hermes":{"tags":["vps","security","hardening","ubuntu","devops"]}} |
This skill defines the "Surgical Scrub" workflow for taking over an existing VPS. Instead of a full OS reinstall (which can be slow), this process identifies and removes legacy artifacts to create a clean, secure baseline.
/etc/passwd for non-system users. Remove any unauthorized or legacy users.
grep -v "/sbin" /etc/passwdkillall -u <username> (Important: kill active processes first).userdel -r <username>echo "" > /root/.ssh/authorized_keyssystemctl list-units --type=service --state=runningcrontab -l / crontab -rapt update && apt upgrade -yapt install -y ufwufw default deny incomingufw allow 22/tcp (Crucial: do this before enabling!)ufw --force enableufw statuscut -d: -f1 /etc/passwdls -l /root/.ssh/authorized_keysufw without first allowing port 22.userdel will fail if the user has running processes. Use killall -u <user> before deleting.apt upgrade) often require a reboot to load the new kernel. Verify with uname -a after reboot.apt upgrade non-interactively via SSH, set DEBIAN_FRONTEND=noninteractive to avoid hanging on config prompts.Provide a summary of: