healthcheck

Audit host security and configure risk tolerance for NEMO deployments.

Updated Feb 12, 2026
One-click install
npx skills add https://github.com/sentientsprite/nemo-agent --skill healthcheck-sentientsprite
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: healthcheck
Source: https://github.com/sentientsprite/nemo-agent/tree/main/skills/healthcheck
Command: npx skills add https://github.com/sentientsprite/nemo-agent --skill healthcheck-sentientsprite

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill hardens the host machine running NEMO, aligning its security posture with your defined risk tolerance and ensuring it's protected against common vulnerabilities.

Core Features & Use Cases

  • Host Security Audits: Performs deep security checks on your operating system, network configuration, and NEMO's own security settings.
  • Risk Tolerance Alignment: Guides you through configuring firewalls, access controls, and update policies to match your desired security level (e.g., Home Workstation, VPS Hardened).
  • Remediation Planning: Generates a clear, step-by-step plan with commands to fix identified security gaps, prioritizing reversibility and access preservation.
  • Use Case: Before deploying NEMO to a new server, use this Skill to audit its security, configure a deny-by-default firewall, and ensure SSH access is restricted to key-based authentication.

Quick Start

Run a deep security audit on this machine and provide a remediation plan.

Frequently Asked Questions about healthcheck

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit on my NEMO host environment?

A NEMO host security audit performs deep checks on your operating system, network configuration, and NEMO's security settings. It evaluates your current posture against common vulnerabilities and generates an actionable remediation plan to close identified gaps.

What is the best way to harden SSH and firewall configurations for a NEMO deployment?

Hardening SSH and firewalls for a NEMO deployment involves configuring deny-by-default network rules and restricting access to key-based authentication. The process aligns configurations with your defined risk tolerance to ensure host protection while preserving necessary access.

Can I align NEMO's security posture with a specific risk tolerance level like VPS Hardened?

Aligning NEMO's security posture with a risk tolerance level like VPS Hardened is supported by configuring firewalls, access controls, and update policies. This guides the host machine's security settings to match your desired level of protection against vulnerabilities.

How do I generate a remediation plan for vulnerabilities found during a host security check?

Generating a remediation plan for vulnerabilities found during a host security check produces a clear, step-by-step list of commands to fix the issues. This plan prioritizes reversibility and access preservation to safely resolve security gaps on your NEMO host.

Does this security hardening process work across different operating systems running NEMO?

Security hardening for NEMO deployments works across various operating systems by performing OS-level checks and integrating NEMO's security tooling. This ensures host security audits, firewall configurations, and update policies are applicable to your specific environment.

When should I run a security hardening audit before deploying NEMO to a new server?

Running a security hardening audit before deploying NEMO to a new server ensures the environment is protected against common vulnerabilities. It checks the operating system and network configuration, allowing you to apply a deny-by-default firewall and restrict SSH access beforehand.