Linux Security Hardener

One-command Linux security hardening. Disables root SSH login, sets up UFW firewall with best-practice rules, configures fail2ban for brute-force protection, and audits user permissions. For Ubuntu/Debian servers running OpenClaw.

Safety Notice

This listing is from the official public ClawHub registry. Review SKILL.md and referenced scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "Linux Security Hardener" with this command: npx skills add laolaoqi/linux-hardener

Linux Security Hardener

Zero-config server hardening for AI agents.

Run one action to audit and harden your Linux server against common attack vectors. Safe defaults — backs up every config before modifying.

Actions

ActionDescription
auditScan current security posture (read-only)
hardenApply hardening measures (SSH key-only, UFW, fail2ban)
rollbackRestore previous config from backups

Features

  • 🔐 SSH: disable root login, key-only auth, change port option
  • 🛡️ UFW: allow only 18792 (OpenClaw), 22 (SSH), rate limiting
  • 🚫 fail2ban: SSH brute-force protection, 5 attempts = 10min ban
  • 📋 Audit report: open ports, user privileges, weak configs
  • 💾 Auto-backup: every change creates a timestamped backup

Pricing

$4.99 — One-time purchase

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Related Skills

Related by shared tags or category signals.

Security

Inner Warden Security

Security advisor for Inner Warden — validates commands before execution, monitors server health, diagnoses issues. All operations on localhost only.

Registry SourceRecently Updated
3851Profile unavailable
Security

Log Privacy Sanitizer

Scans log files and sanitizes sensitive data before sharing or storing. Detects and masks IP addresses, email addresses, API keys, passwords, tokens, credit...

Registry SourceRecently Updated
60Profile unavailable
Security

Session Password

Provides secure session authentication using bcrypt-hashed passwords, security questions, email recovery, and lockout protection with audit logging.

Registry SourceRecently Updated
3981Profile unavailable
Security

Ssh Batch Manager

Batch SSH key management. Distribute/remove SSH keys to/from multiple servers with intelligent connectivity pre-check and source tracking.

Registry SourceRecently Updated
6081Profile unavailable