# Audit SSH servers and clients for weak algorithms and risky config drift with ssh-audit

> Inspect an SSH endpoint or config for outdated ciphers, key exchange choices, and hardening gaps before exposure or upgrades.

- Skill: `agentskillexchange/audit-ssh-servers-and-clients-for-weak-algorithms-and-risky-` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/audit-ssh-servers-and-clients-for-weak-algorithms-and-risky-`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/audit-ssh-servers-and-clients-for-weak-algorithms-and-risky-/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/audit-ssh-servers-and-clients-for-weak-algorithms-and-risky-

---


# Audit SSH servers and clients for weak algorithms and risky config drift with ssh-audit

Inspect an SSH endpoint or config for outdated ciphers, key exchange choices, and hardening gaps before exposure or upgrades.

## Prerequisites

Python 3 or packaged binary, network access to SSH targets

## Installation

Use the upstream install or setup path that matches your environment:
- $ docker pull positronsecurity/ssh-audit

Requirements and caveats from upstream:
- [![Docker Pulls](https://img.shields.io/docker/pulls/positronsecurity/ssh-audit)](https://hub.docker.com/r/positronsecurity/ssh-audit)
- supports Python 3.9 - 3.13;
- -m, --manual print the man page (Docker, PyPI, Snap, and Windows

Basic usage or getting-started notes:
- [Usage](#usage)
- [Server Standard Audit Example](#server-standard-audit-example)
- [Server Policy Audit Example](#server-policy-audit-example)

- Source: https://github.com/jtesta/ssh-audit
- Extracted from upstream docs: https://raw.githubusercontent.com/jtesta/ssh-audit/HEAD/README.md

## Documentation

- https://github.com/jtesta/ssh-audit

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/audit-ssh-servers-and-clients-for-weak-algorithms-and-risky-config-drift-with-ssh-audit/)