skills.rest
Threat-Vector-Security
Threat-Vector-SecurityOFFICIAL
Explore all skills by this author →
WebsiteGitHub

Host And Firewall Defense

Diagnose host and gateway firewall posture and drift in GuardianAgent.

11|3|Updated Feb 24, 2026
Search Tags:#drift#firewall#security-alerts#incident-triage#host-monitor#guardianagent
One-click install
npx skills add https://github.com/Threat-Vector-Security/guardian-agent --skill host-and-firewall-defense
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Host And Firewall Defense
Source: https://github.com/Threat-Vector-Security/guardian-agent/tree/main/skills/host-firewall-defense
Command: npx skills add https://github.com/Threat-Vector-Security/guardian-agent --skill host-and-firewall-defense

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill helps GuardianAgent monitor and defend host and gateway firewall posture, detect drift, and triage related firewall alerts to minimize risk.

Core Features & Use Cases

  • Workflow: Start from a narrow security view and progressively broaden to posture, drift, and alert contexts, using checks like host_monitor_status and gateway_firewall_status.
  • Use cases include auditing host firewall posture, tracking drift in gateway rules, and quickly summarizing alert hygiene for incident triage.

Quick Start

Run a quick check to summarize the current host and gateway firewall posture and flag any new external destinations.

Frequently Asked Questions about Host And Firewall Defense

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check host and gateway firewall posture for security reviews?▼

Check host and gateway firewall posture by running status checks like host_monitor_status and gateway_firewall_status to progressively broaden from a narrow security view to posture, drift, and alert contexts. This workflow quickly summarizes current posture and flags new external destinations.

What is firewall baseline drift and how do I detect it on local hosts?▼

Firewall baseline drift is the unintended change of gateway or host firewall rules over time. Detect drift using GuardianAgent to track rule changes against established baselines, progressively broadening the security view to identify posture deviations and flag new external destinations.

How do I triage firewall security alerts during an incident?▼

Triage firewall security alerts during an incident by using GuardianAgent to summarize alert hygiene and correlate it with firewall posture data. The workflow utilizes security_alert_search to broaden the investigation context and minimize risk through strict guardrails for alert handling.

Does GuardianAgent support tracking gateway firewall rule changes?▼

Yes, GuardianAgent supports tracking gateway firewall rule changes. By utilizing the gateway_firewall_status check, you can audit gateway posture, track drift in rules, and summarize alert hygiene to effectively minimize security risk across local hosts and gateways.

What's the best way to audit host firewall posture and flag new external destinations?▼

The best way to audit host firewall posture is to run a quick check in GuardianAgent that uses host_monitor_status to summarize current configurations and flag any new external destinations, progressively broadening the view to include drift and alert contexts.

Related Skills

Explore More Software Engineering Skills→
Threat-Vector-SecurityThreat-Vector-Security
11

System Operations

Diagnose local machine health, services, and host posture via predefined system tools.

Official
Intermediate
Threat-Vector-SecurityThreat-Vector-Security
11

security-triage

Triage security alerts into evidence, timelines, and recommended next steps.

Official
Intermediate
softweeksoftweek

healthcheck

Audit host security and harden OpenClaw deployment configurations.

Community
Advanced
jaskaranhundaljaskaranhundal
3

network-exposure

Analyze network exposure from scan data, firewall rules, and topology.

Community
Advanced