Host Pentest (authorized, inside-out)

Scope

Security review of the host the agent runs on: laptop, VM, LXC, VPS. The unit of scope is the machine and its local interfaces, not a domain. It answers three questions:

1. What is reachable on this box from loopback, the LAN, and (if any) the public internet?
2. Which host controls are actually in force — SSH, updates, container isolation, secrets, file permissions, firewall?
3. How does this posture compare with the stored reports of prior engagements?

Canonical runner: your local audit script (stdlib Python is enough). This skill is the methodology; the script is the repeatable evidence collector. When they disagree, fix the script and re-run — do not hand-wave the difference.