Skill Detail

Audit SSH servers and clients for weak algorithms and risky config drift with ssh-audit

Inspect an SSH endpoint or config for outdated ciphers, key exchange choices, and hardening gaps before exposure or upgrades.

Security & VerificationMulti-Framework
Security & Verification Multi-Framework Security Reviewed
⭐ 4.2k GitHub stars
INSTALL WITH ANY AGENT
npx skills add agentskillexchange/skills --skill audit-ssh-servers-and-clients-for-weak-algorithms-and-risky-config-drift-with-ssh-audit Copy
Works best when you want a reusable capability, not another fragile one-off prompt.
At a glance
Tools required
Python 3 or packaged binary, network access to SSH targets
Install & setup
Install from the repository or package source, then run `ssh-audit <host>` against the SSH endpoint or use its config-audit modes for local review.
Author
jtesta
Publisher
Individual
Last updated
Apr 15, 2026
Quick brief

Use ssh-audit when an agent needs to evaluate the security posture of an SSH service or client configuration and explain exactly what should change. The agent checks offered ciphers, key exchange algorithms, host key choices, protocol support, and version-level hardening signals, then produces remediation guidance for operators. Invoke this instead of using the product normally when the goal is a targeted SSH posture review before opening access, rotating config, or validating a hardening change. The scope stays bounded to SSH audit and remediation, which keeps it from collapsing into a generic server or security platform listing.