security

Audit IBM i security posture via QSYS2 and SYSTOOLS SQL services.

3|1|Updated Feb 3, 2026

Search Tags:#security #vulnerability #audit #compliance #ibmi #authorities

Ready to run

npx skills add https://github.com/ajshedivy/ibmi-agent-skills --skill security-ajshedivy

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/ajshedivy/ibmi-agent-skills/tree/main/skills/security
Command: npx skills add https://github.com/ajshedivy/ibmi-agent-skills --skill security-ajshedivy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

IBM i security posture is often opaque and hard to quantify. This Skill enables automated assessment of user privileges, object authorities, vulnerability indicators, and function usage by querying QSYS2 and SYSTOOLS.

Core Features & Use Cases

Security auditing of user profiles, special authorities, and group memberships.
Vulnerability detection for impersonation risks, dangerous object permissions, and library list exposure.
Compliance checks and audit readiness across IBM i environments.

Quick Start

Run the security assessment against your IBM i estate to obtain a concise security posture report.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit IBM i user privileges and special authorities?▼

Auditing IBM i user privileges is done by querying QSYS2 SQL services to extract user profiles, special authorities, and group memberships. This skill automates these queries to generate a concise security posture report for risk assessment.

What is the best way to scan for IBM i security vulnerabilities like impersonation risks?▼

Scanning for IBM i security vulnerabilities is best handled by querying QSYS2 and SYSTOOLS SQL views to detect impersonation risks, dangerous object permissions, and library list exposure. This skill runs prebuilt security tools to identify these vulnerability indicators automatically.

Can I run compliance checks across my IBM i environment using SQL services?▼

Yes, you can run compliance checks across IBM i environments using SQL services. This skill queries QSYS2 and SYSTOOLS views to audit object authorities, function usage, and user privileges, producing actionable results for audit readiness and compliance verification.

Does this security audit tool require any external dependencies or components?▼

No external dependencies are required to run this security audit tool. It operates using built-in IBM i SQL views from QSYS2 and SYSTOOLS alongside ibmi CLI tools, requiring no additional components beyond the included references to execute vulnerability scanning and compliance checks.

How do I check secured objects and library list exposure on IBM i?▼

To check secured objects and library list exposure on IBM i, this skill queries QSYS2 SQL services to identify dangerous object permissions and library list vulnerabilities. It leverages prebuilt security tools to scan object authorities and generate actionable risk assessment results.