server-security

name	server-security
description	服务器安全审计与加固。扫描 SSH、防火墙、端口暴露、文件权限、暴力破解等安全问题，生成报告并提供一键修复。当用户说服务器安全、安全审计、安全检查、安全加固时使用
allowed-tools	Bash, AskUserQuestion
metadata	{"argument-hint":"<ssh连接串> 如 root@1.2.3.4"}

Server Security Audit

Use this skill for server security audits and reversible hardening plans across SSH, firewall, users, services, file permissions, and update posture.

Routing

• Start here to confirm scope, safety boundaries, and the minimum workflow.
• Load references/full-guide.md before executing detailed commands, applying templates, or relying on examples from this skill.
• Keep the work limited to the user-requested target; do not add adjacent improvements unless the user asks.

Quick Workflow

1. Confirm the target, available context, constraints, and done-when signal.
2. Read the relevant section of references/full-guide.md for task-specific details.
3. Execute the smallest reversible action that satisfies the request.
4. Verify with read-only evidence first, then document every applied change with rollback commands and post-change validation.
5. Report changed files, commands run, evidence collected, and any remaining risk.

References

• references/full-guide.md - complete command patterns, examples, checklists, and edge cases.