internal/skills/catalog/sha256sum/SKILL.md
# sha256sum / sha512sum — Checksum Verification ## Category File Integrity & Verification ## License GPLv3+ (GNU coreutils) ## Source https://github.com/coreutils/coreutils (included in all Linux distributions) ## Purpose Generate and verify SHA-256/SHA-512 cryptographic checksums. ## Use Cases - Verify binary integrity against known-good checksums - Detect tampered files - Record baselines for known-good binaries - Validate downloaded artifacts ## Examples ```bash # Generate SHA-256 check
npx skillsauth add ggp1/mitiga internal/skills/catalog/sha256sumInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
File Integrity & Verification
GPLv3+ (GNU coreutils)
https://github.com/coreutils/coreutils (included in all Linux distributions)
Generate and verify SHA-256/SHA-512 cryptographic checksums.
# Generate SHA-256 checksum
sha256sum /usr/local/bin/mitiga
# Verify checksums from a file
sha256sum -c checksums.sha256
# Generate SHA-512 checksum
sha512sum /usr/local/bin/mitiga
# Generate checksums for multiple files
sha256sum /etc/ssh/sshd_config /etc/passwd /etc/shadow
development
# who / w — Logged-in Users ## Category User & Group Management ## License GPLv3+ (GNU coreutils) / GPLv2 (procps-ng) ## Source Included in all Linux distributions. ## Purpose Show who is currently logged in and what they are doing. ## Use Cases - Detect unauthorized active sessions - Monitor interactive logins in real-time - Identify login sources (IP, terminal) - Review idle times for active sessions ## Examples ```bash # All login information who -a # Currently logged-in users with act
development
# useradd / usermod / userdel — User Account Management ## Category User & Group Management ## License BSD-3-Clause (shadow-utils) ## Source https://github.com/shadow-maint/shadow (included in all Linux distributions) ## Purpose Create, modify, and delete user accounts. ## Use Cases - Create service accounts for Mitiga components - Modify user group memberships - Disable or remove compromised accounts - Audit account configurations ## Examples ```bash # Create a system service account (no
development
# ufw — Uncomplicated Firewall ## Category System Hardening ## License GPLv3 ## Source https://code.launchpad.net/ufw (included in Ubuntu/Debian) ## Purpose Simplified interface for managing iptables/nftables rules. ## Use Cases - Quick firewall status checks - Rule modifications on systems using ufw - Block malicious sources during incident response ## Examples ```bash # Show firewall status and rules ufw status verbose # Block a malicious IP ufw deny from <malicious_ip> # Allow a speci
development
# trivy — Comprehensive Vulnerability Scanner ## Category Vulnerability Scanning ## License Apache 2.0 ## Source https://github.com/aquasecurity/trivy (CNCF project) ## Purpose Scan filesystems, container images, Git repositories, and IaC configurations for known vulnerabilities (CVEs), misconfigurations, and exposed secrets. ## Use Cases - Audit project dependencies for known CVEs - Scan configuration files for misconfigurations - Detect embedded secrets in repositories - Scan container im