# Tunnel And Network Audit

> Audit active SSH tunnels and network connectivity alongside system network interface status.

- Skill: `knuckles-team/tunnel-and-network-audit` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add knuckles-team/tunnel-and-network-audit`
- Raw SKILL.md: https://api.skillmd.com/api/skills/knuckles-team/tunnel-and-network-audit/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: Knuckles-Team (https://skillmd.com/u/knuckles-team)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/knuckles-team/tunnel-and-network-audit

---


# Tunnel And Network Audit Workflow

**CONCEPT:INFRA-001**

Audit active SSH tunnels and network connectivity alongside system network interface status.

## Steps

### Step 0: Tunnel Manager
**Agent**: `discovery-agent`
**Tools**: `tun_tm_system, tun_tm_hosts`

List all active tunnels from the inventory
Expected: `tunnel`

### Step 1: collect-network-statistics [skill: systems-manager]
**Agent**: `deployer-agent`
**Tools**: `pt_stack, cnt_cm_compose_operations`

Show network interface stats and active connections
Expected: `network, interface`

### Step 2: collect-firewall-rules [skill: systems-manager]
**Agent**: `verifier-agent`
**Tools**: `pt_docker, cnt_cm_container_operations`

Get the system's firewall rules summary
Expected: `firewall, rule`

### Step 3: KG Persistence [depends_on: Step 1, Step 2]
**Agent**: `verifier-agent`
**Tools**: `graph_write`

Persist workflow results as nodes and edges in the Knowledge Graph.
Create appropriate typed nodes with metadata and link to existing domain entities.

## Output
- Tunnel And Network Audit results persisted in KG
- Structured report (MD/PDF)
- Audit trail with timestamps and agent attributions

## Execution

Run this workflow as a dependency-ordered DAG. Steps with no unmet `depends_on` run in parallel; dependents run after their prerequisites complete.

- **Run first (in parallel):** Step 0 — Tunnel Manager; Step 1 — collect-network-statistics; Step 2 — collect-firewall-rules
- **After level 0:** Step 3 — KG Persistence

**Execution:** If graph-os is reachable, offload the whole DAG via `graph_orchestrate action=execute_workflow` (or the `kg-delegate` skill) for true parallel/swarm execution. Otherwise execute the steps natively in dependency order: run steps with no unmet `depends_on` in parallel, then their dependents.