What problem does it solve? Before auditing a machine's security or logs, you need to know what is actually installed and serving traffic. This Skill builds a factual, read-only inventory of the service surface — web servers, databases, and app runtimes — so downstream checks know exactly what exists to examine. ## Core Features & Use Cases - Web server discovery: Detects nginx, Apache, Caddy, lighttpd, and OpenLiteSpeed by scanning config roots and packages, resolving each server's config root, active/enabled state, and actual log directories parsed from its configuration. - Database and runtime detection: Identifies MariaDB/MySQL, PostgreSQL, and php-fpm with versions, using family-blind resolvers that work across Debian/Ubuntu, RHEL, Arch, and macOS (Homebrew). - Profile mismatch detection: Flags the dangerous case where a 'workstation' profile host is actually serving the public (non-loopback listeners), which would silently skip server-only checks. - Use Case: During a /watchman audit, run this first so the security-header, CORS, and log-inspection skills know which server configs and log paths to target, with every finding journaled to SQLite under stable fingerprints. ## Quick Start Ask the AI to inventory the services running on this machine and journal what web servers, databases, and runtimes it finds.
