ssl-check

Audit SSL/TLS endpoints for weaknesses and Mozilla configuration compliance.

5|3|Updated Apr 10, 2026
One-click install
npx skills add https://github.com/zebbern/termstack --skill ssl-check-zebbern
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ssl-check
Source: https://github.com/zebbern/termstack/tree/main/.github/skills/ssl-check
Command: npx skills add https://github.com/zebbern/termstack --skill ssl-check-zebbern

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyze and audit SSL/TLS configurations for security weaknesses and compliance.

Core Features & Use Cases

  • Initial vulnerability checks with testssl.sh and sslyze
  • Mozilla TLS configuration compliance auditing
  • Certificate chain validation and protocol/cipher analysis
  • STARTTLS testing for mail/IMAP/SMTP services
  • Actionable remediation guidance for misconfigurations

Quick Start

Run a comprehensive SSL/TLS assessment on your target domain to reveal vulnerabilities and configuration gaps.

Frequently Asked Questions about ssl-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit SSL/TLS configurations for security weaknesses?

You can audit SSL/TLS configurations by running testssl.sh and sslyze to validate protocol support, inspect cipher suites, verify certificate chains, and generate actionable remediation steps for misconfigurations.

What is Mozilla TLS configuration compliance auditing?

Mozilla TLS configuration compliance auditing validates your endpoint's protocol and cipher suite configurations against Mozilla's recommended security baselines, identifying weaknesses and providing actionable remediation guidance for misconfigurations.

How do I test STARTTLS on mail servers and IMAP services?

To test STARTTLS on mail servers and IMAP services, you apply TLS endpoint auditing tools that verify STARTTLS implementation, validate certificate chains, and inspect protocol and cipher support across your mail environments.

Can I use this to validate certificate chains for web services?

Yes, you can validate certificate chains for web services by analyzing the TLS endpoints, verifying protocol support and cipher suites, and confirming overall Mozilla configuration compliance for your domains.

What is the best way to check for SSL/TLS misconfigurations across environments?

The best way to check for SSL/TLS misconfigurations across environments is running a comprehensive assessment using testssl.sh and sslyze to identify protocol weaknesses, validate certificates, and report actionable remediation steps.