linux-security-diagnosis

Diagnose Linux security incidents across authentication, permission, network, and kernel layers.

3|2|Updated Apr 24, 2026
One-click install
npx skills add https://github.com/openeuler-mirror/witty-diagnosis-agent --skill linux-security-diagnosis-openeuler-mirror
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: linux-security-diagnosis
Source: https://github.com/openeuler-mirror/witty-diagnosis-agent/tree/main/skills/linux-security-diagnosis
Command: npx skills add https://github.com/openeuler-mirror/witty-diagnosis-agent --skill linux-security-diagnosis-openeuler-mirror

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python3, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This skill addresses complex Linux security incidents by providing a structured, evidence-driven framework to diagnose authentication failures, permission issues, network anomalies, and kernel-level security threats.

Core Features & Use Cases

  • Evidence-Driven Diagnosis: Automates the collection of logs and system states to build a clear timeline of security events.
  • Multi-Layered Analysis: Covers authentication (PAM/SSSD), access control (DAC/ACL/SELinux), network security, and kernel integrity.
  • Use Case: When a user reports an inability to SSH into a server, this skill guides the operator through checking PAM configurations, SSSD service status, and SELinux policies to pinpoint the exact cause of the denial.

Quick Start

Execute the linux-security-diagnosis skill to perform a comprehensive security audit and collect all relevant system logs for the current host.

Frequently Asked Questions about linux-security-diagnosis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I diagnose Linux authentication failures when SSH access is denied?

Diagnosing Linux authentication failures involves checking PAM configurations, SSSD service status, and SELinux policies. This skill automates log collection and system state analysis to pinpoint the exact cause of SSH access denial.

What is the best way to perform security forensics and reconstruct an incident timeline on CentOS?

Security forensics on CentOS is best handled by automating script-based data collection to gather logs and system states. This skill reconstructs incident timelines and validates security hypotheses across CentOS, EulerOS, and Anolis distributions.

Does this Linux security diagnosis skill work with SELinux and kernel-level threat analysis?

Yes, this Linux security diagnosis skill works with SELinux and kernel-level threats. It provides multi-layered analysis covering access control (DAC/ACL/SELinux), network security, and kernel integrity for comprehensive root cause analysis.

Do I need python3 installed to run the linux-security-diagnosis skill?

Yes, you need python3 installed to run the linux-security-diagnosis skill. It utilizes python3 to execute automated scripts that collect system logs and validate security hypotheses for evidence-driven diagnosis.

Why does my Linux server have permission issues and network anomalies after a security incident?

Linux server permission issues and network anomalies often stem from modified DAC/ACL rules or compromised network configurations. This skill performs multi-layered analysis to identify the root cause and validate security hypotheses.