security-hardening

Automate security scans of network, SSH, and system integrity with auto-fixes and audit trails.

113|21|Updated Feb 20, 2026

Search Tags:#security #vulnerability assessment #auditing #system administration #hardening #auto-remediation

Ready to run

npx skills add https://github.com/bolivian-peru/os-moda --skill security-hardening-bolivian-peru

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-hardening
Source: https://github.com/bolivian-peru/os-moda/tree/main/skills/security-hardening
Command: npx skills add https://github.com/bolivian-peru/os-moda --skill security-hardening-bolivian-peru

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need for ongoing system security by continuously assessing the security posture, automatically fixing low-risk issues, and providing clear guidance for more complex vulnerabilities.

Core Features & Use Cases

Automated Security Scanning: Regularly checks network, SSH, system configurations, and audit logs against best practices.
Auto-Remediation: Implements safe fixes like enabling fail2ban or blocking brute-force IPs without user intervention.
Risk Assessment & Prioritization: Scores the system's security and highlights issues requiring user approval, differentiating between safe and risky changes.
Use Case: An AI agent can proactively scan a server, identify an open database port, automatically close it, and then report the security score improvement and actions taken.

Quick Start

Run a full security scan and apply all auto-fixable recommendations.

Frequently Asked Questions about security-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate server security hardening and vulnerability assessments?▼

Automated security hardening continuously scans network configurations, SSH settings, and system integrity, auto-fixing safe issues like enabling fail2ban while proposing solutions for risky vulnerabilities. It maintains a tamper-proof audit trail for all changes.

What system administration tasks are required to set up continuous security scanning?▼

Continuous security scanning requires shell execution, system health checks, journal log analysis, service status monitoring, network information retrieval, file system access, and in-memory data storage for historical tracking.

Can I automatically block brute force IPs without manual intervention?▼

Yes, auto-remediation automatically blocks brute-force IPs and enables fail2ban without user intervention. It implements safe fixes directly and scores the system's security posture to highlight issues requiring user approval.

How does risk assessment prioritize system vulnerabilities during auditing?▼

Risk assessment scores the system's security and highlights issues requiring user approval, differentiating between safe and risky changes. It checks configurations against best practices and reports security score improvements after actions are taken.

Does this security auditing tool fix open database ports automatically?▼

Yes, the security auditing tool can proactively scan a server, identify an open database port, automatically close it, and report the security score improvement and actions taken in a tamper-proof audit trail.

What are the limitations of auto-remediation for complex system vulnerabilities?▼

Auto-remediation is limited to implementing safe fixes like blocking IPs. For complex vulnerabilities identified during scans, it proposes solutions and highlights issues requiring manual user approval rather than executing risky changes automatically.