process-audit

Name: process-audit
Availability: InStock
Author: abzhaw

Identify running processes and flag anomalies, unknown services, and suspicious activity.

Updated Feb 21, 2026

Search Tags:#docker #pm2 #system-monitoring #malware-detection #launchctl #process-audit #high-cpu

Ready to run

npx skills add https://github.com/abzhaw/juliaz_agents --skill process-audit-abzhaw

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: process-audit
Source: https://github.com/abzhaw/juliaz_agents/tree/main/meta/agents/security-agent/skills/05-process-audit
Command: npx skills add https://github.com/abzhaw/juliaz_agents --skill process-audit-abzhaw

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Know exactly what runs on this machine and spot anomalies, unknown services, and suspicious activity to maintain security and reliability.

Core Features & Use Cases

Process discovery: List all user-owned processes and system daemons to establish a clear baseline.
Anomaly detection: Identify unknown services, suspicious restarts, and high CPU usage for rapid response.
Use Case: When a server slows down or behaves oddly, run this Skill to surface the top offenders and enable quick containment.

Quick Start

Inspect the active process list and flag unexpected items against the baseline.

Frequently Asked Questions about process-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify unknown services and suspicious running processes on my machine?▼

Process auditing identifies every running process and flags anomalies, unknown services, and suspicious activity. It lists user-owned processes and system daemons to establish a baseline, then surfaces unexpected items for rapid response.

What is the best way to find the cause of high CPU usage on a server?▼

To find high CPU usage causes, process auditing scans active processes and identifies top offenders. It flags high-CPU processes and unexpected restarts, enabling quick containment when a server slows down or behaves oddly.

Does process auditing work with Docker containers and PM2 services?▼

Yes, process auditing works with Docker containers and PM2 services. It accesses process listing utilities like pm2, docker, and launchctl to discover running services across development and production environments for comprehensive system hygiene.

Can I detect suspicious LaunchAgents on macOS through system monitoring?▼

You can detect suspicious LaunchAgents using process auditing with launchctl. It identifies running system daemons and LaunchAgents, flagging unknown items against a known-good baseline to maintain security and reliability.

How do I classify severity when flagging process anomalies?▼

Process auditing classifies severity by comparing running items against a baseline of known-good processes. It requires baseline knowledge to distinguish normal services from unknown items, providing clear severity classification in structured output formats.