healthcheck

Audit and harden Brikko Studio hosts against security risks.

1|Updated May 3, 2026
One-click install
npx skills add https://github.com/brikkoAI/brikko-studio --skill healthcheck-brikkoai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: healthcheck
Source: https://github.com/brikkoAI/brikko-studio/tree/main/packages/core/skills/healthcheck
Command: npx skills add https://github.com/brikkoAI/brikko-studio --skill healthcheck-brikkoai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Running Brikko Studio on an unhardened host exposes sensitive personal data to breaches, non-compliance with Russian 152-ФЗ data protection regulations, and unauthorized access. This Skill eliminates that risk by providing a structured, guided workflow to audit your host's security posture and apply targeted, reversible hardening steps without breaking existing access to your services.

Core Features & Use Cases

  • Comprehensive Security Audits: Runs Brikko Studio's built-in security audit tools plus OS-level checks for open ports, firewall status, SSH configuration, disk encryption, and automatic update settings.
  • Risk-Tailored Hardening: Offers pre-defined security profiles (Home/Workstation Balanced, VPS Hardened, Developer Convenience) or custom rules to match your tolerance, with step-by-step commands and full rollback plans.
  • Compliance Alignment: Helps meet 152-ФЗ requirements for personal data protection by ensuring hosts handling masked sensitive data have appropriate security controls in place.
  • Use Case: A Russian company using Brikko Studio to mask client personal data before sending it to LLMs can run this Skill to verify their host meets regulatory security requirements, close unnecessary open ports, enable firewall rules, and schedule periodic automated security audits.

Quick Start

Use the healthcheck skill to run a full security audit of your Brikko Studio host and apply recommended hardening steps matched to your risk profile.

Frequently Asked Questions about healthcheck

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit and harden host security for a self-hosted deployment?▼

A host security audit checks firewall status, open ports, SSH configuration, disk encryption, and OS update settings to identify misconfigurations. It then applies reversible hardening steps matched to your risk tolerance to eliminate security risks without breaking existing access.

What is the best way to secure SSH and firewall configurations on a VPS?▼

The best way to secure SSH and firewall configurations on a VPS is applying a VPS Hardened security profile. This provides targeted, step-by-step remediation commands for exposed network services and access controls, complete with full rollback plans to preserve access.

Does this security audit work with Linux, macOS, and Windows containers?▼

Yes, the security audit works with Linux, macOS, and Windows operating systems. It supports all self-hosted deployment types, including local workstations, headless gateway servers, VPS instances, and containerized environments across these platforms.

Can I use host hardening to meet 152-ФЗ personal data protection compliance?▼

Yes, you can use host hardening to meet 152-ФЗ personal data protection compliance. The audit verifies that hosts handling masked sensitive data have appropriate security controls in place, satisfying regulatory compliance requirements for Russian companies.

How do I schedule periodic security audits and maintain an audit trail?▼

You can schedule periodic automated security audits and maintain full redacted audit trail logging through the Skill's workflow. This ensures ongoing compliance verification and continuous monitoring of your host's security posture over time.

Will applying OS-level hardening steps break my existing network service access?▼

Applying OS-level hardening steps will not break existing network service access because the Skill provides reversible remediation steps. Every hardening action includes a full rollback plan to ensure access is preserved while closing security risks.