The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes shell scripts (audit.sh and harden.sh) on remote servers via SSH. These scripts are designed for system administration and security auditing.
Evidence: ssh $CM USER@HOST 'sudo bash -s -- --known-ips IPS' < scripts/audit.sh in SKILL.md.
[DATA_EXFILTRATION]: The skill optionally sends SSH login notifications to a user-provided Slack or Discord webhook.
Evidence: The --webhook parameter in harden.sh configures a pam_exec script to send login events to the specified URL.
The implementation uses a backgrounded curl command with a short timeout to ensure system performance is not impacted by network latency.
[SAFE]: The skill follows security best practices by encouraging the use of multiplexed SSH connections, verification of new admin users before locking out root, and providing a clear rollback mechanism. The audit.sh script is strictly read-only and does not modify the target system.

vm-security