Ssl Certificate Sweep

Connect to a supplied set of targets, parse their TLS certificates for expiration and grade, and render the results as a formatted sweep report. Use when a fleet operator needs a recurring certificate-expiry report; this workflow is read-only and does not rotate or reissue certificates.

Knuckles-Team 9ca4bba 2 files · 1.6 KB Updated

File contents

SSL Certificate Sweep Workflow

Compose the named atomic skills without adding new certificate logic here.

Inputs

Provide the target host/endpoint list.

Steps

Step 0: ssl-expiry-checker [skill: ssl-expiry-checker]

Invoke $ssl-expiry-checker with the workflow inputs to connect to the targets and parse expiration and security grade.

Expected: expiry_report

Step 1: document-converter [skill: document-converter] [depends_on: Step 0]

Invoke $document-converter with expiry_report to render it as a formatted Markdown/PDF sweep report.

Expected: sweep_document

Output

Return expiry_report and sweep_document. Does not rotate or reissue certificates.

Execution

  • Run first: Step 0 — $ssl-expiry-checker.
  • After level 0: Step 1 — $document-converter.

Execution: If graph-os is reachable, offload the whole DAG via graph_orchestrate action=execute_workflow (or the kg-delegate skill) for true parallel/swarm execution. Otherwise execute the steps natively in dependency order: run steps with no unmet depends_on in parallel, then their dependents.

Knuckles-Team/universal-skills/tree/main/universal_skills/health-workflows/ssl-certificate-sweep commit 9ca4bbaa9e

Frequently asked questions

npx skillmds@latest add knuckles-team/ssl-certificate-sweep