| name | sparkstation-security-audit |
| description | Security audit for Sparkstation. Checks API auth, exposed ports, env file permissions, container privileges, network binding, and secrets. Use when asked to "audit security", "check for vulnerabilities", "is this secure", or "review security settings". |
Sparkstation Security Audit
Reviews Sparkstation configuration and runtime for security issues.
Usage
python3 .pi/skills/sparkstation-security-audit/scripts/audit.py
python3 .pi/skills/sparkstation-security-audit/scripts/audit.py --json
What It Checks
- API Authentication: Master key strength, default keys, auth bypass
- Network Binding: Services bound to localhost vs 0.0.0.0
- Environment File: .env permissions, exposed secrets, .gitignore
- Container Security: Privileged mode, capabilities, user namespacing
- Port Exposure: Unexpected ports open externally
- Secrets in Code: HF tokens, API keys in tracked files
- File Permissions: Data directory, log files, database
- Default Credentials: Check for default/placeholder API keys