server-audit

What This Skill Does

The server-audit skill is an automated, comprehensive diagnostic tool for remote server environments. It leverages SSH to connect securely to your infrastructure and perform a multi-layered scan. By executing a specialized shell script, it gathers crucial data regarding OS kernel version, hardware resource utilization, active network services, open listening ports, and system-level security configurations such as SELinux and firewall states. Furthermore, it inspects critical software stacks including Nginx, PHP, MariaDB, Node.js, and Docker, providing a unified view of your server's health. The output is distilled into a structured, human-readable Markdown report that highlights security vulnerabilities based on a pre-defined rule engine, categorized by severity (Serious, Warning, and Suggestion).

Installation

To install this skill, use the ClawHub command-line tool: clawhub install openclaw/skills/skills/aowind/sjht-server-audit

Ensure that you have previously configured SSH access using the ssh-ops skill, as this tool relies on existing credential management to perform non-interactive, password-less logins.

Use Cases

This tool is ideal for system administrators and DevOps engineers who need to perform quick health checks on multiple servers. Typical use cases include:

• Performing security hardening checks before taking a server into production.
• Auditing unauthorized services or suspicious processes that might indicate a compromise.
• Generating routine maintenance reports for client infrastructure.
• Identifying misconfigured databases exposed to the public internet.
• Troubleshooting performance bottlenecks related to resource saturation.

Example Prompts

1. "巡检一下我的开发服务器 192.168.1.10，检查一下是否有开放了高危端口。"
2. "帮我生成一份针对 10.0.0.5 服务器的安全检查报告，重点关注 SSH 和防火墙设置。"
3. "我想对这三台服务器进行安全巡检：119.91.38.151, 119.91.38.152, 119.91.38.153，并汇总安全建议。"

Tips & Limitations

• Security First: The tool generates reports locally in ~/.openclaw/workspac/audits/. Never upload these files to public repositories as they may contain sensitive environment metadata.
• Dependencies: The script assumes a Linux environment with Bash available. It is optimized for standard distributions but may require manual adjustments for legacy systems.
• Performance: For large fleets, use the batch processing loop provided in the documentation to ensure orderly execution. The audit is non-intrusive but will consume minor CPU/IO resources during the scan.