internal/skills/catalog/getent/SKILL.md
# getent — Name Service Lookup ## Category User & Group Management ## License LGPLv2.1+ (glibc) ## Source Included in all Linux distributions (part of glibc). ## Purpose Query NSS databases — passwd, group, shadow, hosts, services. ## Use Cases - Enumerate all system users and groups (including LDAP/NIS) - Verify account existence - Audit group memberships - Resolve hostnames and service names ## Examples ```bash # List all system users getent passwd # List all system groups getent group
npx skillsauth add ggp1/mitiga internal/skills/catalog/getentInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
User & Group Management
LGPLv2.1+ (glibc)
Included in all Linux distributions (part of glibc).
Query NSS databases — passwd, group, shadow, hosts, services.
# List all system users
getent passwd
# List all system groups
getent group
# Check sudo/wheel group membership
getent group sudo
getent group wheel
# Look up a specific user
getent passwd username
# List all services
getent services
development
# who / w — Logged-in Users ## Category User & Group Management ## License GPLv3+ (GNU coreutils) / GPLv2 (procps-ng) ## Source Included in all Linux distributions. ## Purpose Show who is currently logged in and what they are doing. ## Use Cases - Detect unauthorized active sessions - Monitor interactive logins in real-time - Identify login sources (IP, terminal) - Review idle times for active sessions ## Examples ```bash # All login information who -a # Currently logged-in users with act
development
# useradd / usermod / userdel — User Account Management ## Category User & Group Management ## License BSD-3-Clause (shadow-utils) ## Source https://github.com/shadow-maint/shadow (included in all Linux distributions) ## Purpose Create, modify, and delete user accounts. ## Use Cases - Create service accounts for Mitiga components - Modify user group memberships - Disable or remove compromised accounts - Audit account configurations ## Examples ```bash # Create a system service account (no
development
# ufw — Uncomplicated Firewall ## Category System Hardening ## License GPLv3 ## Source https://code.launchpad.net/ufw (included in Ubuntu/Debian) ## Purpose Simplified interface for managing iptables/nftables rules. ## Use Cases - Quick firewall status checks - Rule modifications on systems using ufw - Block malicious sources during incident response ## Examples ```bash # Show firewall status and rules ufw status verbose # Block a malicious IP ufw deny from <malicious_ip> # Allow a speci
development
# trivy — Comprehensive Vulnerability Scanner ## Category Vulnerability Scanning ## License Apache 2.0 ## Source https://github.com/aquasecurity/trivy (CNCF project) ## Purpose Scan filesystems, container images, Git repositories, and IaC configurations for known vulnerabilities (CVEs), misconfigurations, and exposed secrets. ## Use Cases - Audit project dependencies for known CVEs - Scan configuration files for misconfigurations - Detect embedded secrets in repositories - Scan container im