Verified:GitHub

server-security

Audit production Linux server security and generate a severity-ranked report.

Updated May 15, 2026

Search Tags:#security audit #server security #configuration drift #docker hardening #firewall ports #cloudflare access #systemd security

Ready to run

npx skills add https://github.com/Asher-Plihal/claude-skills --skill server-security

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: server-security
Source: https://github.com/Asher-Plihal/claude-skills/tree/main/server-security
Command: npx skills add https://github.com/Asher-Plihal/claude-skills --skill server-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires bash, curl, openssl, ss, sudo, systemctl, docker, ssh-keygen, git, tailscale, journalctl, sysctl, find, diff, stat, mktemp, and includes scripts (resource) and references (resource) components.

What problem does it solve?

It prevents unnoticed security drift on a production Linux server by running a comprehensive, read-only audit and turning the results into a severity-ranked report for immediate action.

Core Features & Use Cases

Read-only security auditing across Cloudflare Access, firewall/ports, systemd services, Docker containers, application routing/isolation, Tailscale/SSH hygiene, secrets exposure, host + systemd hardening, and Cloudflare tunnel health.
Baseline-based drift detection against an expected-state reference and explicit accepted-risks list so true regressions stand out.
Guided remediation workflow that offers safe options first, then applies only approved fixes one at a time with impact reasoning and verification.

Quick Start

Invoke server-security to audit Asher's production Ubuntu server and return a structured severity report by asking the AI to run a security check.

Frequently Asked Questions about server-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit my Linux server for security configuration drift?▼

Auditing Linux server security configuration drift requires comparing current firewall, Docker, and systemd states against an expected baseline. This skill runs a read-only checks script to detect exposure and hardening gaps, producing a severity-ranked report highlighting true regressions.

What's the best way to check Docker container hardening and systemd security on a production server?▼

Checking Docker container hardening and systemd security on a production server involves running read-only audits to detect misconfigurations. This skill inspects service states, container isolation, and host hardening, generating a staged remediation workflow with safe options first.

How does baseline drift detection work for server security audits?▼

Baseline drift detection for server security audits works by comparing live system checks against an expected-state reference and an accepted-risks list. This isolates true regressions from known accepted issues, ensuring the final severity-ranked report focuses only on new hardening gaps.

Can I audit Cloudflare Access and Tailscale SSH hygiene on an Ubuntu server?▼

You can audit Cloudflare Access enforcement and Tailscale SSH hygiene on an Ubuntu server using bundled read-only checks. The skill validates tunnel health, firewall ports, and SSH key configurations, returning findings in a severity-ranked report for immediate action.

Do I need root access to run a server security audit and fix configuration issues?▼

You need root access via sudo to perform a comprehensive server security audit, as the checks inspect systemd, firewall rules, and Docker states. The guided remediation workflow applies approved fixes one at a time with impact reasoning and verification.

What are the limitations of read-only server security audits?▼

The limitation of read-only server security audits is that they identify configuration drift and exposure but do not automatically apply changes. Remediation requires explicit approval through a guided workflow that applies fixes one at a time with impact reasoning and verification.