AI Agent Skill HUB

server-audit

远程服务器安全巡检和环境报告工具。通过 SSH 免密登录远程主机，全面检查系统信息、运行服务、开放端口、 Web 服务器配置、数据库配置、安全设置（SSH/防火墙/SELinux）、可疑进程和定时任务，生成结构化的巡检报告。Use when 用户需要检查服务器安全、排查服务器环境、了解服务器上运行了什么服务、生成巡检报告、或提及"巡检"、"安全检查"、"服务器检查"。

3,891 stars

View on GitHub Installation ↓

Best use case

server-audit is best used when you need a repeatable AI agent workflow instead of a one-off prompt.

远程服务器安全巡检和环境报告工具。通过 SSH 免密登录远程主机，全面检查系统信息、运行服务、开放端口、 Web 服务器配置、数据库配置、安全设置（SSH/防火墙/SELinux）、可疑进程和定时任务，生成结构化的巡检报告。Use when 用户需要检查服务器安全、排查服务器环境、了解服务器上运行了什么服务、生成巡检报告、或提及"巡检"、"安全检查"、"服务器检查"。

Teams using server-audit should expect a more consistent output, faster repeated execution, less prompt rewriting.

When to use this skill

You want a reusable workflow that can be run more than once with consistent structure.

When not to use this skill

You only need a quick one-off answer and do not need a reusable workflow.
You cannot install or maintain the underlying files, dependencies, or repository context.

Installation

Claude Code / Cursor / Codex

$curl -o ~/.claude/skills/sjht-server-audit/SKILL.md --create-dirs "https://raw.githubusercontent.com/openclaw/skills/main/skills/aowind/sjht-server-audit/SKILL.md"

Manual Installation

Download SKILL.md from GitHub
Place it in .claude/skills/sjht-server-audit/SKILL.md inside your project
Restart your AI agent — it will auto-discover the skill

How server-audit Compares

Feature / Agent	server-audit	Standard Approach
Platform Support	Not specified	Limited / Varies
Context Awareness	High	Baseline
Installation Complexity	Unknown	N/A

Frequently Asked Questions

What does this skill do?

远程服务器安全巡检和环境报告工具。通过 SSH 免密登录远程主机，全面检查系统信息、运行服务、开放端口、 Web 服务器配置、数据库配置、安全设置（SSH/防火墙/SELinux）、可疑进程和定时任务，生成结构化的巡检报告。Use when 用户需要检查服务器安全、排查服务器环境、了解服务器上运行了什么服务、生成巡检报告、或提及"巡检"、"安全检查"、"服务器检查"。

Where can I find the source code?

You can find the source code on GitHub using the link provided at the top of the page.

Related Guides

AI Agents for Marketing

Discover AI agents for marketing workflows, from SEO and content production to campaign research, outreach, and analytics.

AI Agents for Startups

Explore AI agent skills for startup validation, product research, growth experiments, documentation, and fast execution with small teams.

AI Agents for Coding

Browse AI agent skills for coding, debugging, testing, refactoring, code review, and developer workflows across Claude, Cursor, and Codex.

SKILL.md Source

# server-audit — 远程服务器巡检

通过 SSH 免密登录检查远程服务器环境与安全状况，生成巡检报告。

## 前提条件

- 已通过 `ssh-ops` skill 配置好免密登录
- 或手动配置了 SSH 密钥认证

## 工作流程

### 1. 运行巡检脚本

```bash
bash <skill>/scripts/server-audit.sh <host> [user]
```

脚本会自动收集以下信息并输出快速安全判定：

- **系统信息**: OS、内核、CPU、内存、磁盘、Swap
- **运行服务**: systemd running services
- **开放端口**: 所有 TCP 监听端口
- **防火墙**: firewalld 状态和规则、SELinux 状态
- **Web 服务**: Nginx/PHP-FPM/MariaDB/Node/Docker 版本和状态
- **Nginx 虚拟主机**: server_name、root、listen
- **网站文件**: /www/wwwroot 下的站点检测
- **安全配置**: SSH 配置（密码认证、Root 登录、端口）
- **可疑项目**: 失败登录记录、定时任务、高内存进程

### 2. 基于脚本输出生成详细报告

根据脚本收集的数据，生成结构化的 Markdown 报告。

**⚠️ 报告保存位置：** `~/.openclaw/workspac/audits/<IP>-<日期>.md`

报告只保存在本地 workspace，**不要上传到任何 GitHub 仓库**。

文件命名格式：`119.91.38.151-20260319.md`

报告模板：
```markdown
# 服务器巡检报告
**主机:** <IP>
**检查时间:** <时间>

## 1. 基础信息
## 2. 已安装服务
## 3. 开放端口（标注风险）
## 4. 安全问题（🔴严重/⚠️警告/💡建议）
## 5. 快速修复命令
```

## 安全判定规则

### 🔴 严重（需立即修复）
- 数据库端口（3306/5432）监听 0.0.0.0
- 管理面板端口（宝塔 8888、phpMyAdmin）监听 0.0.0.0
- SSH 允许 root 密码登录

### ⚠️ 警告（建议修复）
- 防火墙未启用
- SELinux 禁用
- SSH 密码认证未禁用
- 无 Swap 分区
- 存在暴力破解尝试
- 可疑定时任务

### 💡 建议（优化项）
- SSH 默认端口 22
- 缺少运行时（Node.js 等）
- 未使用的服务（Postfix 等）
- 无自动备份策略

## 多服务器批量巡检

对多台服务器循环执行：
```bash
for host in 192.168.1.1 192.168.1.2 10.0.0.1; do
  echo "=== $host ==="
  bash <skill>/scripts/server-audit.sh "$host"
  echo ""
done
```

Related Skills

Payroll Compliance Auditor

from openclaw/skills

Run a full payroll audit in under 10 minutes. Catches the errors that cost companies $845 per violation.

Payroll & HR Compliance

Energy Audit — Commercial Building Assessment

from openclaw/skills

Run a full energy audit for commercial or industrial facilities. Identifies waste, models savings, and generates a prioritized retrofit roadmap with ROI timelines.

Sustainability & Efficiency

Compliance & Audit Readiness Engine

from openclaw/skills

Your AI compliance officer. Guides startups and scale-ups through SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS — from zero to audit-ready. No consultants needed.

Compliance Audit Generator

from openclaw/skills

Run internal compliance audits against major frameworks without hiring a consultant.

Cloud Cost Optimization Audit

from openclaw/skills

Analyze cloud infrastructure spend across AWS, Azure, and GCP. Identify waste, rightsizing opportunities, and reserved instance savings.

AI Spend Audit

from openclaw/skills

Audit your company's AI spending — find waste, measure ROI, and right-size your tool stack.

AI Safety Audit

from openclaw/skills

Comprehensive AI safety and alignment audit framework for businesses deploying AI agents. Built around the UK AI Security Institute Alignment Project standards (2026), EU AI Act requirements, and NIST AI RMF.

SX-security-audit

from openclaw/skills

全方位安全审计技能。检查文件权限、环境变量、依赖漏洞、配置文件、网络端口、Git 安全、Shell 安全、macOS 安全、密钥检测等。支持 CLI 参数、JSON 输出、配置文件。当用户要求"安全检查"、"漏洞扫描"、"权限检查"、"安全审计"时使用此技能。

Skill Audit 🔍

from openclaw/skills

扫描 OpenClaw skills 中的安全风险，防止供应链攻击。

agentic-mcp-server-builder

from openclaw/skills

Scaffold MCP server projects and baseline tool contract checks. Use for defining tool schemas, generating starter server layouts, and validating MCP-ready structure.

Coding & Development

website-audit

from openclaw/skills

Website Audit mit 230+ Rules für SEO, Performance, Security, Technical und Content Issues. LLM-optimierte Reports mit Health Scores und Handlungsempfehlungen.

claude-audit

from openclaw/skills

Full project audit — launches 5 parallel AI agents (security, bugs, dead code, architecture, performance) to scan your codebase read-only, then compiles a unified report with health grade (A+ to F) and offers surgical fixes. Language-agnostic. Zero config.