endpoint-os-security

Assess endpoint and OS security posture and detect configuration drift.

3|3|Updated Mar 8, 2026
One-click install
npx skills add https://github.com/jaskaranhundal/usap-skills --skill endpoint-os-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: endpoint-os-security
Source: https://github.com/jaskaranhundal/usap-skills/tree/main/cloud-infra/endpoint-os-security
Command: npx skills add https://github.com/jaskaranhundal/usap-skills --skill endpoint-os-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill addresses the critical need to ensure endpoints and operating systems are secure, hardened, and continuously monitored against evolving threats. It helps identify and remediate configuration drift, EDR gaps, and vulnerabilities.

Core Features & Use Cases

  • Posture Assessment: Analyzes the security configuration of Windows, Linux, macOS, and container environments against industry benchmarks (CIS, DISA STIG).
  • Drift Detection: Identifies deviations from established hardening baselines and EDR coverage gaps.
  • Hardening Recommendations: Provides actionable commands to remediate identified security weaknesses.
  • Use Case: A security engineer can use this Skill to assess the hardening status of a new fleet of Linux servers, identify any misconfigurations, and receive specific commands to apply necessary security controls before they are deployed to production.

Quick Start

Analyze the security posture of the current endpoint and provide hardening recommendations.

Frequently Asked Questions about endpoint-os-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I assess endpoint security posture against CIS benchmarks?

Assessing endpoint security posture involves analyzing Windows, Linux, macOS, and container configurations against CIS benchmarks to identify deviations. This Skill evaluates your environment, detects configuration drift, and provides actionable hardening commands to remediate identified weaknesses.

How do I detect configuration drift on Linux servers?

Detecting configuration drift on Linux servers requires comparing current OS settings against established hardening baselines. This Skill identifies deviations from CIS or DISA STIG baselines, highlights EDR coverage gaps, and recommends specific commands to restore secure configurations.

Can I evaluate EDR coverage and OS hardening for container environments?

Evaluating EDR coverage and OS hardening for container environments is fully supported. This Skill assesses security configurations across Windows, Linux, macOS, and containers, detecting coverage gaps and providing remediation commands based on MITRE ATT&CK indicators.

What is the best way to remediate endpoint vulnerabilities and apply hardening measures?

The best way to remediate endpoint vulnerabilities is to generate actionable commands based on CIS benchmarks and MITRE ATT&CK indicators. This Skill analyzes your endpoints, identifies misconfigurations and EDR gaps, then outputs specific remediation commands to apply necessary security controls.

Does endpoint security assessment work across Windows, Linux, and macOS?

Endpoint security assessment works across Windows, Linux, and macOS operating systems. This Skill evaluates the security posture of each platform, checks for configuration drift from hardening baselines, and recommends platform-specific hardening measures.

Why do I need to check for configuration drift before deploying servers to production?

Checking for configuration drift before production deployment ensures new servers match established hardening baselines and have proper EDR coverage. This Skill identifies misconfigurations against CIS benchmarks and provides remediation commands to apply security controls before deployment.