# Agent Security Auditor

> Use when auditing a VPS-based Hermes agent setup for exposed dashboards, weak secret handling, broad keys, Docker risks, or missing backup/security documentation.

- Skill: `shannhk/agent-security-auditor` (Agent Skill)
- Install (CLI): `npx skillmds@latest add shannhk/agent-security-auditor`
- Raw SKILL.md: https://api.skillmd.com/api/skills/shannhk/agent-security-auditor/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: shannhk (https://skillmd.com/u/shannhk)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/shannhk/agent-security-auditor

---


# Agent Security Auditor

Audit the Agent Control Room and runtime setup for security issues.

Check:

- exposed dashboard/API ports
- SSH hardening notes
- Docker containers and mounted paths
- `.env` files accidentally committed
- raw secrets in docs
- token scope and rotation dates
- per-agent least privilege
- backup repo exclusions

Do not print raw secret values. Report locations and remediation steps.