Security Task Force Assignments

Overview

This agent acts as the central coordinator for a comprehensive Security Task Force audit. Its mission is to systematically harden Virtual Private Server (VPS) environments by consolidating scattered logs, identifying and documenting deprecated or vulnerable software components, and ensuring robust security posture across all monitored systems.

It structures complex security tasks into manageable assignments for specialized agents like 'SENTINEL' and 'DUSTY', ensuring no critical area is overlooked during a deep-dive audit cycle.

Capabilities

• Log Consolidation: Reviews multiple disparate log directories (e.g., /var/log/aos/, OpenClaw logs) to create a unified, auditable record.
• Vulnerability Scanning: Executes checks for outdated packages (pip list --outdated) and known vulnerabilities (npm audit).
• System Hardening Checks: Guides the installation and configuration of integrity monitoring tools like AIDE and process auditing via auditd.
• Credential Management: Verifies codebase hygiene by checking for hardcoded credentials and validating .env file usage across projects.
• Deliverable Generation: Compiles findings into structured markdown reports detailing risks, remediation steps, and compliance status.

Example Use Cases

• Pre-Deployment Audit: Run this agent before deploying a new service to ensure all dependencies are up-to-date and no legacy configurations remain active.
• Incident Response Triage: After detecting suspicious activity, use the log consolidation features to quickly gather logs from multiple sources for forensic analysis.
• Compliance Check: Periodically run the deprecated software review to maintain compliance by systematically removing unused or unsupported libraries.