sovereign-audit

Consolidate DSH node audit outputs into a markdown verdict with fix commands.

3|Updated Apr 18, 2026
One-click install
npx skills add https://github.com/garochee33/DSH --skill sovereign-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sovereign-audit
Source: https://github.com/garochee33/DSH/tree/main/kb/claude/skills/sovereign-audit
Command: npx skills add https://github.com/garochee33/DSH --skill sovereign-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill removes the friction of manually checking a DSH node’s security posture by consolidating audit results, protocol checks, and machine profile data into one authoritative report.

Core Features & Use Cases

  • Unified hardening assessment: Runs audit.sh, dome-check.sh, and machine-probe.py, then merges their findings into a single markdown report.
  • Actionable remediation: Lists every failure with the exact suggested fix command or a manual recovery path when no mapping exists.
  • Operational reporting: Captures pass/fail counts, auto-fixed items, runtime versions, and a final verdict for operators, reviewers, or downstream automation.
  • Use case: A platform engineer can run this Skill after onboarding a new DSH machine to quickly verify firewall, DNS, secrets, and runtime readiness.

Quick Start

Ask the skill to run a sovereign audit of the current DSH node and produce a consolidated markdown report with the verdict, findings, and remediation guidance.

Frequently Asked Questions about sovereign-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a unified DSH node hardening report from multiple audit scripts?

Generate a unified DSH node hardening report by parsing outputs from audit.sh, dome-check.sh, and machine-probe.py into a single markdown verdict with pass/fail counts, findings, and exact fix commands for each failure.

What is included in a DSH security posture review for firewall, DNS, and FileVault checks?

A DSH security posture review includes hardening checks across FileVault, firewall, DNS, secrets, runtime, and repository hygiene signals, consolidating findings into a markdown report with exact remediation commands and a final operational verdict.

How do I get exact remediation commands for failed security audit checks on a DSH machine?

Get exact remediation commands by parsing audit.sh and dome-check.sh outputs; the consolidated report maps every failure to a suggested fix command or provides a manual recovery path when no automated mapping exists.

Can I use this approach to verify DSH runtime readiness and track auto-fixed items after onboarding?

Verify DSH runtime readiness by running machine-probe.py alongside audit scripts; the merged report captures runtime versions, auto-fixed item counts, and pass/fail tracking suitable for operators or downstream automation pipelines.

Does the DSH hardening report require any external dependencies to parse the audit results?

Parsing DSH hardening audit results requires no external dependencies; the skill consolidates raw outputs from audit.sh, dome-check.sh, and machine-probe.py directly into a markdown report without needing additional libraries or components.

What is the best way to consolidate machine probe data and audit findings into one markdown verdict?

The best way to consolidate machine probe data and audit findings is to merge dome-check.sh, audit.sh, and machine-probe.py outputs into a single authoritative markdown file containing the final verdict, operational counts, and actionable remediation guidance.