skills.rest
Nightreaver
NightreaverCOMMUNITY
Explore all skills by this author →
GitHub

ssh-integrity-audit

Audit SSH host identity, file hashes, artifact signatures, and SUID/world-writable files.

6|Updated Apr 17, 2026
Search Tags:#security#ssh#file integrity#host audit#suid scan
One-click install
npx skills add https://github.com/Nightreaver/python-ssh-mcp --skill ssh-integrity-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ssh-integrity-audit
Source: https://github.com/Nightreaver/python-ssh-mcp/tree/main/runbooks/ssh-integrity-audit
Command: npx skills add https://github.com/Nightreaver/python-ssh-mcp --skill ssh-integrity-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps maintain the security and integrity of SSH hosts by confirming identity, checking file integrity, verifying artifact signatures, and scanning for SUID/world-writable files.

Core Features & Use Cases

  • Identity Pinning: Verify the identity of SSH hosts to ensure they are what you expect.
  • File-level Hash Drift: Check that pinned files haven't changed, confirming integrity.
  • Signature Verification: Validate the authenticity of release artifacts on the host.
  • SUID/World-writable Scan: Detect potentially harmful SUID binaries and world-writable files.
  • Use Case: Use this Skill as part of your regular security checks to ensure your SSH infrastructure is secure.

Quick Start

Run the 'ssh-integrity-audit' skill against the host 'web01' to verify its identity, file integrity, artifact signatures, and check for SUID/world-writable files.

Frequently Asked Questions about ssh-integrity-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit an SSH host for file integrity and SUID binaries?▼

To audit an SSH host for file integrity and SUID binaries, perform an end-to-end check that verifies host identity, pinned file hashes, artifact signatures, and scans for world-writable files. This confirms the host remains secure and unaltered.

What is checked during a comprehensive SSH host security audit?▼

A comprehensive SSH host security audit checks host identity pinning, file-level hash drift to ensure pinned files haven't changed, artifact signature verification, and detects potentially harmful SUID binaries and world-writable files.

Can I verify artifact signatures and detect world-writable files on remote SSH hosts?▼

Yes, you can verify artifact signatures and detect world-writable files on remote SSH hosts by running an end-to-end integrity audit. This process validates release authenticity and scans for harmful SUID binaries or world-writable files.

Does identity pinning work for regular SSH infrastructure security checks?▼

Identity pinning works effectively for regular SSH infrastructure security checks by verifying that SSH hosts are exactly what you expect them to be. It ensures continuous host identity validation and data integrity in critical environments.

Why does file hash drift indicate a potential security issue on my SSH host?▼

File hash drift indicates a potential security issue on your SSH host because it shows that pinned files have changed unexpectedly. Checking this drift confirms whether your host's data integrity has been compromised.

Related Skills

NightreaverNightreaver
6

ssh-file-hash

Compute MD5, SHA1, SHA256, or SHA512 hashes of remote files over SSH.

Community
Basic
HeadyAIHeadyAI
1

heady-audit-forge

Generate and preserve auditable evidence for regulatory compliance and external audits.

Official
Advanced
KaiserWhoLearnsKaiserWhoLearns

threat-detection

Detect port scans, DoS events, and beaconing using exact threshold rules.

Community
Advanced
miko06miko06

guard

Enforces directory-boundary edits and warns before destructive commands in Bash.

Community
Intermediate