exposed-service-triage SKILL.md skillA
exposed-service-triage from stijnman/grok-custom-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add stijnman/grok-custom-skills/exposed-service-triage@v1.1.0Pins v1.1.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- stijnman/grok-custom-skills
- Path
.grok/skills/exposed-service-triage/SKILL.md- Versions recorded
- 2
- Latest version
- v1.1.0, committed Aug 14, 2026
- First version recorded
- Jun 24, 2026
- Size
- 2,306 bytes
- Repository stars
- 14
- License
- MIT
Triages exposed TCP listeners found by security audits. Use for: exposed port, what is listening, fix exposed service, open port.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Exposed Service Triage ## When to Use - User says **exposed port** or task matches this capability - User says **what is listening** or task matches this capability - User says **fix exposed service** or task matches this capability - User says **open port** or task matches this capability ## Workflow 1. Run read-only listener inventory (ss -tln, fuser) on user machine. 2. Map ports to processes; classify MCP-related vs system vs unknown. 3. Present findings table with risk tier and plain-language explanation. 4. Recommend: bind 127.0.0.1, disable service, or firewall rule. 5. Before stopping/disabling any service: hitl-approver required. 6. Never run aggressive remote scans or attack exposed services. ## Integrations - `defensive-mcp-audit` - `hitl-approver` ## Error Handling | Failure | Response | |---------|----------| | Cannot identify process | Report port and binding; suggest sudo ss -tlnp with user consent. | | User requests aggressive scan | Decline; offer defensive audit only. | ## Gotchas - Common OS services on 0.0.0.0 may be intentional; explain before recommending disable. ## Safety & Ethics (Publication-Ready) …
Read the whole file at its exact version.
How to install
mdr add stijnman/grok-custom-skills/exposed-service-triage@sha256:4b31199b239f95bbThe line at the top of this page pins the label v1.1.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_wm3xxcjfabqhsznr)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Jun 24, 2026 and Aug 14, 2026, about one every 51 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.1.0 latest | 2026-08-14 | abe185a | 2,306 B | A | view · diff |
| v1.0.0 | 2026-06-24 | 5c9866b | 2,501 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (2306 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
stijnman/grok-custom-skills · 14 stars · license MIT · pushed 2026-10-21 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_wm3xxcjfabqhsznr GET https://markdownregistry.com/api/v1/resolve?ref=stijnman/grok-custom-skills/exposed-service-triage GET https://markdownregistry.com/api/v1/blob/4b31199b239f95bb45bda376fae6e063a9a23c473ccfe09e1c547325db2590dd
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.