← All skills
security-hardening
69 / 100 · Review before installing
Check before installing.
By ancoleman/ai-design-components (GitHub) · design · 530 stars · scanned at commit 76551b7
Reduces attack surface across OS, container, cloud, network, and database layers using CIS Benchmarks and zero-trust principles. Use when hardening production infrastructure, meeting compliance requirements, or implementing defense-in-depth security.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
This is disclosed by the author in the skill's SKILL.md or README.
Found in 17 places.
Show 14 more
- skills/security-hardening/SKILL.md, line 186
trivy image --severity HIGH,CRITICAL myapp:latest - skills/security-hardening/SKILL.md, line 195
checkov -d terraform/ --framework terraform - skills/security-hardening/SKILL.md, line 204
kubesec scan k8s/deployment.yaml - skills/security-hardening/SKILL.md, line 216
prowler aws --services s3 iam ec2 - skills/security-hardening/SKILL.md, line 271
kube-bench run --json > cis-report.json - skills/security-hardening/SKILL.md, line 313
PermitRootLogin no - skills/security-hardening/scripts/harden-linux.py, line 50
subprocess.run(["sysctl", "--system"], check=True, capture_output=True) - skills/security-hardening/scripts/harden-linux.py, line 95
result = subprocess.run(["sshd", "-t"], capture_output=True, text=True) - skills/security-hardening/scripts/harden-linux.py, line 97
subprocess.run(["systemctl", "reload", "sshd"], check=True) - skills/security-hardening/scripts/harden-linux.py, line 138
result = subprocess.run( - skills/security-hardening/scripts/harden-linux.py, line 144
subprocess.run(["systemctl", "disable", service], check=True) - skills/security-hardening/scripts/harden-linux.py, line 145
subprocess.run(["systemctl", "stop", service], check=True) - skills/security-hardening/scripts/harden-linux.py, line 175
result = subprocess.run( - skills/security-hardening/scripts/harden-linux.py, line 188
result = subprocess.run(
Sends data to these websites: example.com
This is disclosed by the author in the skill's SKILL.md or README.
Found in 4 places.
Show 1 more
Downloads and installs other software
The author does not mention this.
Found in 15 places.
Show 12 more
- skills/security-hardening/references/cloud-hardening.md, line 826
pip install prowler - skills/security-hardening/references/cloud-hardening.md, line 842
pip install scoutsuite - skills/security-hardening/references/cloud-hardening.md, line 858
pip install checkov - skills/security-hardening/references/container-hardening.md, line 48
RUN pip install --no-cache-dir -r requirements.txt --target=/app/deps - skills/security-hardening/references/container-hardening.md, line 137
RUN apt-get update && apt-get install -y nginx - skills/security-hardening/references/container-hardening.md, line 142
RUN apt-get update && apt-get install -y nginx \ - skills/security-hardening/references/container-hardening.md, line 171
RUN apt-get install -y curl - skills/security-hardening/references/container-hardening.md, line 177
&& apt-get install -y --no-install-recommends curl \ - skills/security-hardening/references/container-hardening.md, line 623
go install github.com/sigstore/cosign/v2/cmd/cosign@latest - skills/security-hardening/references/network-hardening.md, line 348
apt-get install certbot python3-certbot-nginx - skills/security-hardening/references/network-hardening.md, line 393
apt-get install bind9 bind9utils - skills/security-hardening/references/network-hardening.md, line 483
apt-get install suricata
Changes files outside its own folder
The author does not mention this.
Found in 3 places.
Safer alternatives
Low-risk skills in the same category (design) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'security-hardening' ] || [ -L ~/.agents/skills/'security-hardening' ]; then echo 'A skill folder named security-hardening already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/ancoleman/ai-design-components' "$d" && git -C "$d" checkout --quiet '76551b7b19ebc667764ec75da14990d0aef8b6e5' -- 'skills/security-hardening' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/security-hardening' ~/.agents/skills/'security-hardening' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'security-hardening' ~/.claude/skills/'security-hardening' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for ancoleman/ai-design-components shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/ancoleman/ai-design-components/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | 76551b7 | 100 |
| 2026-11-07 | 76551b7 | 69 |