ssl-check

Name: ssl-check
Availability: InStock
Author: zebbern

Audit SSL/TLS endpoints for weaknesses and Mozilla configuration compliance.

5|3|Updated Apr 10, 2026

Search Tags:#security #compliance #tls #ssl #certificate #cipher

Ready to run

npx skills add https://github.com/zebbern/termstack --skill ssl-check-zebbern

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: ssl-check
Source: https://github.com/zebbern/termstack/tree/main/.github/skills/ssl-check
Command: npx skills add https://github.com/zebbern/termstack --skill ssl-check-zebbern

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyze and audit SSL/TLS configurations for security weaknesses and compliance.

Core Features & Use Cases

Initial vulnerability checks with testssl.sh and sslyze
Mozilla TLS configuration compliance auditing
Certificate chain validation and protocol/cipher analysis
STARTTLS testing for mail/IMAP/SMTP services
Actionable remediation guidance for misconfigurations

Quick Start

Run a comprehensive SSL/TLS assessment on your target domain to reveal vulnerabilities and configuration gaps.

Frequently Asked Questions about ssl-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit SSL/TLS configurations for security weaknesses?▼

You can audit SSL/TLS configurations by running testssl.sh and sslyze to validate protocol support, inspect cipher suites, verify certificate chains, and generate actionable remediation steps for misconfigurations.

What is Mozilla TLS configuration compliance auditing?▼

Mozilla TLS configuration compliance auditing validates your endpoint's protocol and cipher suite configurations against Mozilla's recommended security baselines, identifying weaknesses and providing actionable remediation guidance for misconfigurations.

How do I test STARTTLS on mail servers and IMAP services?▼

To test STARTTLS on mail servers and IMAP services, you apply TLS endpoint auditing tools that verify STARTTLS implementation, validate certificate chains, and inspect protocol and cipher support across your mail environments.

Can I use this to validate certificate chains for web services?▼

Yes, you can validate certificate chains for web services by analyzing the TLS endpoints, verifying protocol support and cipher suites, and confirming overall Mozilla configuration compliance for your domains.

What is the best way to check for SSL/TLS misconfigurations across environments?▼

The best way to check for SSL/TLS misconfigurations across environments is running a comprehensive assessment using testssl.sh and sslyze to identify protocol weaknesses, validate certificates, and report actionable remediation steps.