daily-security-triage

What problem does it solve?

This Skill automates routine local security checks to detect common signs of system compromise, helping to maintain the integrity of your machine.

Core Features & Use Cases

• Shell Profile Injection Detection: Scans shell profiles for suspicious eval/curl/wget/python patterns.
• Secret Environment Variable Exposure: Identifies exported API keys, tokens, and secrets in shell profiles.
• Git Configuration Tampering: Checks for unusual core.hooksPath or suspicious aliases in .gitconfig.
• Node.js Persistence: Detects unexpected global Node packages and suspicious network connections from Node.js.
• Use Case: Run this daily to proactively identify potential security issues before they escalate, or use it when investigating a suspected system compromise.

Quick Start

Run the daily security triage script to check your local system for suspicious activity.