How do I install the Healthcheck skill?

Run npx skillmds@latest add promisingcoder/healthcheck in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Healthcheck safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Healthcheck?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Healthcheck free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Healthcheck?

promisingcoder (@promisingcoder) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Healthcheck by promisingcoder — Agent Skill

Name: Healthcheck
Rating: 4.2 (5 reviews)
Author: promisingcoder

File contents

MarketingClaw host healthcheck

Goal: assess host risk, run read-only checks, then propose staged hardening without breaking access.

Rules

Ask before state-changing actions.
Do not change SSH/firewall/remote access until access path is confirmed.
Prefer reversible steps and rollback notes.
Never claim MarketingClaw manages OS firewall, SSH, or updates.
If identity/role unknown, recommend only.
User choices: numbered list.
Never print secrets.

Context to infer first

OS/version, container vs host.
Privilege level.
Access path: local, SSH, RDP, tailnet.
Network exposure: public IP, reverse proxy, tunnel, LAN only.
MarketingClaw gateway status, bind, auth.
Backup status.
Disk encryption.
Automatic security updates.
Usage mode: personal workstation, local assistant box, remote server, other.

Ask only for missing facts. Simple phrasing preferred.

Read-only checks

Ask once for permission to run read-only checks. Then run relevant commands.

Common:

marketingclaw security audit --deep
marketingclaw gateway status --deep
marketingclaw doctor

macOS:

sw_vers
lsof -nP -iTCP -sTCP:LISTEN
/usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate
pfctl -s info
tmutil status
fdesetup status
softwareupdate --schedule

Linux:

cat /etc/os-release
ss -ltnup || ss -ltnp
ufw status || firewall-cmd --state || nft list ruleset
systemctl status ssh sshd
lsblk -f

Windows:

systeminfo
Get-NetFirewallProfile
Get-BitLockerVolume

Risk profile

After context is known, ask desired posture:

Convenience: local/private, minimal prompts.
Balanced: secure defaults, low friction.
Strict: remote/public/sensitive data, more lock-down.

Report shape

Current posture: one paragraph.
Findings: severity + evidence + why it matters.
Recommended plan: staged, reversible.
Commands: read-only first; write actions only after approval.
Gaps: what could not be checked.

Hardening menu

Offer only relevant items:

Bind gateway to loopback/LAN/tailnet intentionally.
Require auth for remote access.
Close public ports or restrict by firewall.
Enable OS security updates.
Enable disk encryption.
Verify backups and restore path.
Disable password SSH or require keys/MFA where appropriate.
Add scheduled marketingclaw security audit --deep.

Confirm exact action before applying.

---name: healthcheckdescription: Audit/harden MarketingClaw hosts: SSH, firewall, updates, exposure, backups, disk encryption, gateway security.---# MarketingClaw host healthcheckGoal: assess host risk, run read-only checks, then propose staged hardening without breaking access.## Rules- Ask before state-changing actions.- Do not change SSH/firewall/remote access until access path is confirmed.- Prefer reversible steps and rollback notes.- Never claim MarketingClaw manages OS firewall, SSH, or updates.- If identity/role unknown, recommend only.- User choices: numbered list.- Never print secrets.## Context to infer first- OS/version, container vs host.- Privilege level.- Access path: local, SSH, RDP, tailnet.- Network exposure: public IP, reverse proxy, tunnel, LAN only.- MarketingClaw gateway status, bind, auth.- Backup status.- Disk encryption.- Automatic security updates.- Usage mode: personal workstation, local assistant box, remote server, other.Ask only for missing facts. Simple phrasing preferred.## Read-only checksAsk once for permission to run read-only checks. Then run relevant commands.Common:```bashmarketingclaw security audit --deepmarketingclaw gateway status --deepmarketingclaw doctor```macOS:```bashsw_verslsof -nP -iTCP -sTCP:LISTEN/usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstatepfctl -s infotmutil statusfdesetup statussoftwareupdate --schedule```Linux:```bashcat /etc/os-releasess -ltnup || ss -ltnpufw status || firewall-cmd --state || nft list rulesetsystemctl status ssh sshdlsblk -f```Windows:```powershellsysteminfoGet-NetFirewallProfileGet-BitLockerVolume```## Risk profileAfter context is known, ask desired posture:1. Convenience: local/private, minimal prompts.2. Balanced: secure defaults, low friction.3. Strict: remote/public/sensitive data, more lock-down.## Report shape- Current posture: one paragraph.- Findings: severity + evidence + why it matters.- Recommended plan: staged, reversible.- Commands: read-only first; write actions only after approval.- Gaps: what could not be checked.## Hardening menuOffer only relevant items:- Bind gateway to loopback/LAN/tailnet intentionally.- Require auth for remote access.- Close public ports or restrict by firewall.- Enable OS security updates.- Enable disk encryption.- Verify backups and restore path.- Disable password SSH or require keys/MFA where appropriate.- Add scheduled `marketingclaw security audit --deep`.Confirm exact action before applying.

Frequently asked questions

Healthcheck