cis-benchmarks
This skill automates CIS benchmark auditing across Linux and Kubernetes environments using industry-standard tools. Run security assessments, identify compliance gaps, and track remediation through a structured workflow that includes scanning, analysis, fixes, and validation.
CIS Benchmarks audits systems against security standards using automated tools like OpenSCAP, Lynis, and InSpec to generate compliance reports.
AI-generated summary based on this skill's SKILL.md
Decision gist · record as of 2026-05-22
CIS Benchmarks audits systems against security standards using automated tools like OpenSCAP, Lynis, and InSpec to generate compliance reports. This skill automates CIS benchmark auditing across Linux and Kubernetes environments using industry-standard tools. Run security assessments, identify compliance gaps, and track remediation through a structured workflow that includes scanning, analysis, fixes, and validation.
Use it when
- cis-benchmarks hardens systems to meet regulatory and security baseline standards by implementing CIS benchmark controls.
- Yes, cis-benchmarks evaluates both Kubernetes and Linux environments against CIS security profiles.
Verify before relying
Read SKILL.md below before installing (1 file). Open directory: indexed for reading, not audited.
Similar skills
Install
BagelHole/DevOps-Security-Agent-Skills/cis-benchmarks · repository language: Shell
Open directory. Skills are indexed for reading, not audited. Review a skill's body before installing it.
Frequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How do I run a CIS compliance scan with cis-benchmarks?
cis-benchmarks automates CIS compliance scanning across Linux and Kubernetes systems. The skill executes industry-standard assessment tools to identify security gaps against CIS benchmarks, generates detailed compliance reports, and tracks violations. You can initiate scans through the structured workflow, which handles scanning, analysis, and documentation of findings automatically.
What does cis-benchmarks do for system hardening?
cis-benchmarks hardens systems to meet regulatory and security baseline standards by implementing CIS benchmark controls. The skill not only audits your infrastructure against CIS security profiles but also remediates violations automatically. It applies hardening recommendations across Linux and Kubernetes environments, ensuring systems conform to industry security baselines.
Can cis-benchmarks assess Kubernetes and Linux compliance?
Yes, cis-benchmarks evaluates both Kubernetes and Linux environments against CIS security profiles. The skill performs comprehensive compliance assessments on these platforms, identifies deviations from CIS benchmarks, and supports remediation workflows. It integrates with standard tools to deliver detailed security posture analysis for containerized and traditional Linux systems.
How does cis-benchmarks track security compliance over time?
cis-benchmarks enables continuous compliance validation through re-assessment capabilities. The skill tracks compliance status across multiple scans, documents remediation progress, and maintains audit trails of security changes. This ongoing monitoring helps validate that systems remain aligned with CIS security standards and regulatory requirements.
What remediation does cis-benchmarks provide for violations?
cis-benchmarks implements automated remediation for CIS benchmark violations identified during audits. The skill applies fixes based on CIS hardening recommendations, validates corrections through follow-up assessments, and generates compliance reports showing remediation status. This end-to-end approach reduces manual effort in achieving and maintaining security baselines.
Does cis-benchmarks generate compliance reports?
cis-benchmarks generates comprehensive compliance reports documenting audit findings, violations, and remediation actions. The skill produces structured reports that detail security gaps against CIS benchmarks, track remediation progress, and support regulatory compliance documentation. Reports enable stakeholders to understand security posture and compliance status across audited systems.
SKILL.md
Rendered from the published skill. Quoted content, verbatim.
CIS Benchmarks
Implement and audit CIS security benchmarks.
When to Use This Skill
Use this skill when: - Assessing security compliance - Implementing security baselines - Meeting regulatory requirements - Hardening systems to standards
Assessment Tools
OpenSCAP
# Install
apt install openscap-scanner scap-security-guide
# Run CIS benchmark scan
oscap xccdf eval \
--profile xccdf_org.ssgproject.content_profile_cis \
--results results.xml \
--report report.html \
/usr/share/xml/scap/ssg/content/ssg-ubuntu2204-ds.xml
Lynis
# Install
apt install lynis
# Run audit
lynis audit system
# Generate report
lynis audit system --report-file /tmp/lynis-report.dat
InSpec
```ruby
cis-profile/controls/ssh.rb
control 'cis-ssh-1' do impact 1.0 title 'Ensure SSH root login is disabled'
describe sshd_config do
(truncated - see the full file via the links below)
File tree — 1 file
security/hardening/cis-benchmarks/SKILL.md
Let your AI agent find skills like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 56,283 agent skills by what they can do, searchable in plain language.
wish › “Audit systems against CIS security benchmarks and generate compliance reports”
Give your agent the search over MCP, or paste the wish link into any chat. No install? Search from any chat →
Related skills
This skill walks you through a methodical process for securing fresh Linux servers, starting with SSH key verification and progressing through non-root user creation, UFW firewall rules, fail2ban protection, and SSH hardening. Each stage includes verification steps to prevent lockout.
This skill equips AI agents to handle version management workflows by applying semantic versioning conventions to your release pipeline. Streamline version bumping, changelog generation, and release tagging—letting your automation handle the repetitive parts of version control so your team focuses on what matters.
gate-check automates the verification step in the change governance process by selecting the correct approval gate based on affected layers, running its entry criteria and error checks, and populating the approval form for human sign-off. It verifies but never approves—all signature and decision fields remain blank for the designated approvers.
VPN Setup guides you through deploying WireGuard, OpenVPN, and managed VPN solutions like Tailscale for encrypted remote access and network-to-network tunneling. It covers server configuration, client setup, peer management, and cloud VPN integration with practical scripts and security hardening.
Deploy and operate production-grade GPU clusters in Kubernetes with built-in support for NVIDIA device plugins, MIG partitioning, and time-slicing. Monitor GPU health via DCGM metrics and Prometheus, configure autoscaling policies, and troubleshoot scheduling and driver issues across your AI infrastructure.
Set up host-based and cloud firewalls across Linux systems and AWS environments. This skill covers iptables and nftables configuration for traffic filtering, network segmentation between application tiers, and cloud security group rules—with examples for DDoS protection, rate limiting, and incident response blocking.
More skills aws-s3 (MIT) · gpu-server-management (MIT)