What problem does it solve? Machines running Otto (laptops, workstations, Raspberry Pis, VPS servers) often ship with insecure defaults: open ports, weak SSH settings, missing firewall rules, and disabled automatic updates. This Skill performs a structured security audit of the host, aligns it to a user-chosen risk tolerance, and remediates gaps without locking the user out of remote access. ## Core Features & Use Cases - Read-only posture assessment: Infers OS, privilege level, access path, network exposure, backup status, disk encryption, and update settings, then runs otto security audit --deep and otto update status. - Risk-profile-driven remediation: Offers numbered profiles (Home/Workstation Balanced, VPS Hardened, Developer Convenience, Custom) and produces a step-by-step plan with exact commands, rollback strategy, and lockout warnings before any change. - Scheduled periodic checks: Uses otto cron add with stable job names like healthcheck:security-audit to run recurring audits and version checks, only after explicit user approval. - Use Case: A user running Otto on a headless VPS asks for a security review. The Skill detects public exposure, finds password-based SSH login and no firewall, proposes a VPS Hardened plan with key-only SSH and deny-by-default inbound rules, and executes each step with confirmation. ## Quick Start Ask the assistant to run a security healthcheck on this machine and harden it to a balanced home profile.
