← Back to Skills Marketplace
laolaoqi

Linux Security Hardener

by new · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
27
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install linux-hardener
Description
One-command Linux security hardening. Disables root SSH login, sets up UFW firewall with best-practice rules, configures fail2ban for brute-force protection,...
README (SKILL.md)

Linux Security Hardener

Zero-config server hardening for AI agents.

Run one action to audit and harden your Linux server against common attack vectors. Safe defaults — backs up every config before modifying.

Actions

Action Description
audit Scan current security posture (read-only)
harden Apply hardening measures (SSH key-only, UFW, fail2ban)
rollback Restore previous config from backups

Features

  • 🔐 SSH: disable root login, key-only auth, change port option
  • 🛡️ UFW: allow only 18792 (OpenClaw), 22 (SSH), rate limiting
  • 🚫 fail2ban: SSH brute-force protection, 5 attempts = 10min ban
  • 📋 Audit report: open ports, user privileges, weak configs
  • 💾 Auto-backup: every change creates a timestamped backup

Pricing

$4.99 — One-time purchase

Usage Guidance
Before installing or using this skill, treat `harden` as a privileged server-change operation. Run only on an intended Ubuntu/Debian host, review the exact commands if available, run the audit first, confirm all needed ports, verify SSH key login, keep console or provider recovery access available, and make independent backups before applying changes.
Capability Analysis
Type: OpenClaw Skill Name: linux-hardener Version: 1.0.0 The skill bundle contains metadata and documentation for a Linux security hardening tool designed for AI agents. The documentation (SKILL.md) describes standard administrative tasks such as SSH hardening, UFW firewall configuration, and fail2ban setup, all of which are consistent with the stated purpose of improving server security. No executable code was provided, and the instructions contain no evidence of prompt injection, data exfiltration, or malicious intent.
Capability Tags
cryptocan-make-purchases
Capability Assessment
Purpose & Capability
The stated purpose and described capabilities are coherent for a Linux hardening skill, but they intentionally include high-impact SSH, firewall, and fail2ban changes.
Instruction Scope
The `harden` action is described as a one-action change to authentication and firewall controls, but the artifacts do not show explicit per-change approval, dry-run review, prerequisite checks, or command boundaries.
Install Mechanism
There is no install spec and no code to scan, so the exact commands, backup behavior, and rollback implementation are not reviewable from the provided artifacts.
Credentials
The skill is described for Ubuntu/Debian servers, but the metadata shows no OS restriction or required binaries, despite relying on SSH, UFW, and fail2ban-style behavior.
Persistence & Privilege
The skill proposes persistent privileged system configuration changes, including SSH login policy and firewall rules, with only high-level rollback/backups described.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install linux-hardener
  3. After installation, invoke the skill by name or use /linux-hardener
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release - one-command server hardening
Metadata
Slug linux-hardener
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Linux Security Hardener?

One-command Linux security hardening. Disables root SSH login, sets up UFW firewall with best-practice rules, configures fail2ban for brute-force protection,... It is an AI Agent Skill for Claude Code / OpenClaw, with 27 downloads so far.

How do I install Linux Security Hardener?

Run "/install linux-hardener" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Linux Security Hardener free?

Yes, Linux Security Hardener is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Linux Security Hardener support?

Linux Security Hardener is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Linux Security Hardener?

It is built and maintained by new (@laolaoqi); the current version is v1.0.0.

💬 Comments