SECURITY2 Multi-file Components

Linux CIS Benchmark Server Hardening Protocol

Step-by-step security hardening checklist for Ubuntu and Debian cloud virtual machines.

Author: TRIHEX Architecture Lab

•

License: MIT

•

Version: 2.1.0

Inert Code Verified · Heuristic Static Security ScannerHeuristic Scanner: LOW Risk

Heuristic static security scanner audited 2 files (2520 bytes). External code. Review before execution.

v2.1.0

Skill Files (2)

Compatible Runtimes

AntigravityClaude CodeCursor

SKILL.md·markdown

# Linux CIS Benchmark Server Hardening Protocol

SSH key-only authentication, disabled root login, UFW firewall, fail2ban intrusion detection, and auditd logging.

## Core Invariants & Rules
1. Set PermitRootLogin no and PasswordAuthentication no in /etc/ssh/sshd_config.
2. Verify input validation and security boundaries on all executions.
3. Keep configurations modular, typed, and auditable.

## Operational Workflow
1. Analyze requirements against existing codebase patterns.
2. Apply standardized implementation templates.
3. Execute verification suites before deployment.