ssh-audit

ssh-audit reads what an SSH endpoint actually negotiates — its key-exchange, host-key, cipher and MAC algorithms — and grades each as info / warn / fail, alongside non-crypto checks (the DHEat DoS and Terrapin). It only reports. This skill covers running it, reading it, and turning a finding into a concrete sshd_config directive — but it stays out of how you deploy that directive. Whether the fix lands via a config-management role, a hand edit, or anything else is the host project's decision, not this skill's.

When in doubt, ask the operator