internal/skills/catalog/groupadd/SKILL.md
# groupadd / groupmod / groupdel — Group Account Management ## Category User & Group Management ## License BSD-3-Clause (shadow-utils) ## Source https://github.com/shadow-maint/shadow (included in all Linux distributions) ## Purpose Create, modify, and delete groups. Companion to `useradd` — together they provide full user and group lifecycle management. ## Use Cases - Create dedicated groups for Mitiga agent operations (e.g., `mitiga_agents`) - Remove unauthorized or orphaned groups - Modi
npx skillsauth add ggp1/mitiga internal/skills/catalog/groupaddInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
User & Group Management
BSD-3-Clause (shadow-utils)
https://github.com/shadow-maint/shadow (included in all Linux distributions)
Create, modify, and delete groups. Companion to useradd — together they provide full user and group lifecycle management.
mitiga_agents)# Create a dedicated group for Mitiga agents
groupadd mitiga_agents
# Create a system group (low GID, no login)
groupadd --system mitiga_svc
# Rename a group
groupmod -n new_name old_name
# Delete an unauthorized group (after verifying no active members)
groupdel unauthorized_group
# List all groups (via getent)
getent group
# List members of a specific group
getent group mitiga_agents
getent group before modifications.find / -gid <gid> -ls before deletion.development
# who / w — Logged-in Users ## Category User & Group Management ## License GPLv3+ (GNU coreutils) / GPLv2 (procps-ng) ## Source Included in all Linux distributions. ## Purpose Show who is currently logged in and what they are doing. ## Use Cases - Detect unauthorized active sessions - Monitor interactive logins in real-time - Identify login sources (IP, terminal) - Review idle times for active sessions ## Examples ```bash # All login information who -a # Currently logged-in users with act
development
# useradd / usermod / userdel — User Account Management ## Category User & Group Management ## License BSD-3-Clause (shadow-utils) ## Source https://github.com/shadow-maint/shadow (included in all Linux distributions) ## Purpose Create, modify, and delete user accounts. ## Use Cases - Create service accounts for Mitiga components - Modify user group memberships - Disable or remove compromised accounts - Audit account configurations ## Examples ```bash # Create a system service account (no
development
# ufw — Uncomplicated Firewall ## Category System Hardening ## License GPLv3 ## Source https://code.launchpad.net/ufw (included in Ubuntu/Debian) ## Purpose Simplified interface for managing iptables/nftables rules. ## Use Cases - Quick firewall status checks - Rule modifications on systems using ufw - Block malicious sources during incident response ## Examples ```bash # Show firewall status and rules ufw status verbose # Block a malicious IP ufw deny from <malicious_ip> # Allow a speci
development
# trivy — Comprehensive Vulnerability Scanner ## Category Vulnerability Scanning ## License Apache 2.0 ## Source https://github.com/aquasecurity/trivy (CNCF project) ## Purpose Scan filesystems, container images, Git repositories, and IaC configurations for known vulnerabilities (CVEs), misconfigurations, and exposed secrets. ## Use Cases - Audit project dependencies for known CVEs - Scan configuration files for misconfigurations - Detect embedded secrets in repositories - Scan container im