ssh-integrity-audit

Audit SSH host identity, file hashes, artifact signatures, and SUID/world-writable files.

6|Updated Apr 17, 2026

Search Tags:#security #ssh #file integrity #host audit #suid scan

Ready to run

npx skills add https://github.com/Nightreaver/python-ssh-mcp --skill ssh-integrity-audit

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ssh-integrity-audit
Source: https://github.com/Nightreaver/python-ssh-mcp/tree/main/runbooks/ssh-integrity-audit
Command: npx skills add https://github.com/Nightreaver/python-ssh-mcp --skill ssh-integrity-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps maintain the security and integrity of SSH hosts by confirming identity, checking file integrity, verifying artifact signatures, and scanning for SUID/world-writable files.

Core Features & Use Cases

Identity Pinning: Verify the identity of SSH hosts to ensure they are what you expect.
File-level Hash Drift: Check that pinned files haven't changed, confirming integrity.
Signature Verification: Validate the authenticity of release artifacts on the host.
SUID/World-writable Scan: Detect potentially harmful SUID binaries and world-writable files.
Use Case: Use this Skill as part of your regular security checks to ensure your SSH infrastructure is secure.

Quick Start

Run the 'ssh-integrity-audit' skill against the host 'web01' to verify its identity, file integrity, artifact signatures, and check for SUID/world-writable files.

Frequently Asked Questions about ssh-integrity-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit an SSH host for file integrity and SUID binaries?▼

To audit an SSH host for file integrity and SUID binaries, perform an end-to-end check that verifies host identity, pinned file hashes, artifact signatures, and scans for world-writable files. This confirms the host remains secure and unaltered.

What is checked during a comprehensive SSH host security audit?▼

A comprehensive SSH host security audit checks host identity pinning, file-level hash drift to ensure pinned files haven't changed, artifact signature verification, and detects potentially harmful SUID binaries and world-writable files.

Can I verify artifact signatures and detect world-writable files on remote SSH hosts?▼

Yes, you can verify artifact signatures and detect world-writable files on remote SSH hosts by running an end-to-end integrity audit. This process validates release authenticity and scans for harmful SUID binaries or world-writable files.

Does identity pinning work for regular SSH infrastructure security checks?▼

Identity pinning works effectively for regular SSH infrastructure security checks by verifying that SSH hosts are exactly what you expect them to be. It ensures continuous host identity validation and data integrity in critical environments.

Why does file hash drift indicate a potential security issue on my SSH host?▼

File hash drift indicates a potential security issue on your SSH host because it shows that pinned files have changed unexpectedly. Checking this drift confirms whether your host's data integrity has been compromised.