security-audit

Audit network and TLS configurations with nmap, openssl, curl, and ssh-keyscan.

2|Updated Feb 16, 2026
One-click install
npx skills add https://github.com/dmzoneill/skills --skill security-audit-dmzoneill
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/dmzoneill/skills/tree/main/security-audit
Command: npx skills add https://github.com/dmzoneill/skills --skill security-audit-dmzoneill

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of auditing network and TLS security, identifying potential vulnerabilities and misconfigurations.

Core Features & Use Cases

  • Network Scanning: Performs port scans, vulnerability scans, and service detection.
  • TLS/SSL Analysis: Inspects certificates, cipher suites, and connection security.
  • HTTP Header Checks: Verifies security headers like HSTS and CSP.
  • SSH Host Key Verification: Scans for SSH host key fingerprints.
  • Use Case: When you need to quickly assess the security posture of a new server or an existing web application.

Quick Start

Run a security audit on the target host 'example.com' with full scan enabled.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a network security audit to scan ports and check TLS certificates?

To run a network security audit, this Skill automates port scanning, TLS certificate inspection, and vulnerability assessment using nmap and openssl. It analyzes target host configurations to provide detailed security insights and identify potential misconfigurations.

What does a TLS cipher suite analysis check during a security audit?

A TLS cipher suite analysis inspects SSL certificates and evaluates connection security protocols. This Skill uses openssl to verify cipher suite strength and ensure encrypted connections are properly configured against potential vulnerabilities on the target host.

Can I check HTTP security headers like HSTS and CSP with a vulnerability scan?

Yes, you can check HTTP security headers during a vulnerability scan. This Skill utilizes curl to validate headers like HSTS and CSP, verifying that web applications enforce proper browser security policies alongside network and SSH host key fingerprinting.

Does this security audit support SSH host key fingerprinting for remote servers?

Yes, this security audit supports SSH host key fingerprinting for remote servers. It uses ssh-keyscan to retrieve SSH host key fingerprints, allowing you to verify the identity and security posture of your specified target host.

What's the best way to assess the security posture of a new server?

The best way to assess a new server's security posture is performing a comprehensive network security audit. This Skill identifies vulnerabilities by combining port scanning, TLS analysis, HTTP header validation, and SSH fingerprinting to deliver detailed security insights.