What problem does it solve? cPanel and WHM servers have their own control plane (cPHulk, Exim, CSF, Imunify, EasyApache PHP versions) that generic OS-level audits miss, and hand-editing cPanel configs is dangerous because the platform regenerates them. This skill reads the control plane safely and surfaces misconfigurations without ever changing them. ## Core Features & Use Cases - Read-only control-plane scan: Queries whmapi1, Exim queue counts, cPHulk status, CSF, Imunify detections, and check_cpanel_rpms to detect EOL PHP per account, outbound spam spikes, altered cPanel RPMs, and disabled brute-force protection. - Self-gating execution: Detects whether the host runs cPanel and exits as a no-op on non-cPanel machines, so it is safe to include in every audit loop. - Journaled findings with regression detection: Every finding is upserted into a SQLite journal with a stable per-subject fingerprint, so a defense that gets turned back off (e.g., cPHulk disabled again) surfaces loudly. - Use Case: During a scheduled server audit, the skill flags that one hosting account still runs an end-of-life PHP version and that the Exim queue shows an outbound spam spike, then proposes the exact control-panel actions for the operator to approve. ## Quick Start Ask the AI to run the inspect-cpanel audit on this server and report any cPanel security or configuration findings.
