blaktron/server-maintenance-audit
Audits a Linux server you name: checks its logs, looks up package CVEs, applies the updates you ask for, and schedules a reboot you want.
Declared capabilities
Capabilities are the author's declaration and the basis for policy and scanning. The registry cannot enforce them at run time. Your runtime should.
MCP servers & tools
agentry run serves exactly the tools this contract declares, through a per-run MCP gateway. An undeclared capability is a tool that does not exist at run time.
Tools the runner grants
| Manifest declaration | Tool(s) granted |
|---|---|
| (always) | write_report — reports → the run's output folder |
| (always) | list_inputs, read_input, search_inputs — operator-provided input files, read-only |
| (always) | scratch_list, scratch_read, scratch_write, scratch_search — the run's own scratch folder at /scratch, private to the run and deleted at its end; the runner's grant, not a line of the contract |
| (always) | export_pdf — a Markdown report as a PDF in reports/, laid out in your report design; the runner's grant, not a line of the contract |
| (always) | grep, glob — search file contents by regular expression and list files by path pattern (ripgrep), one area a call: the inputs, attached knowledge, /scratch; the runner's grant, not a line of the contract |
| network.egress | fetch — pinned to api.osv.dev |
| targetHosts | host_run, host_read, host_write, host_put, host_get, host_shell_open, host_shell_send, host_shell_read, host_shell_close — on the server server names at run time, as the account you sign in with, through the host link; runs on your own computer only |
MCP servers involved
- QuickAgent Tools — the runner's companion server, served through a per-run Docker MCP Gateway; its tool surface is exactly the table above.
- Operator-cataloged MCP servers may be attached for the declared dataAccess categories (files, other); undeclared categories are never wired in.
In an embedded install
Installed into an existing coding agent (agentry install), the same contract maps to the host's built-in tools — enforcement there is the host's. Allowed tools: WebFetch(domain:api.osv.dev).
Install
agentry install blaktron/server-maintenance-audit@0.1.0 --target=agents-mdgit clone https://secureagentry.net/blaktron/server-maintenance-audit.gitgit clone ssh://git@git.secureagentry.net/blaktron/server-maintenance-audit.gitagents-md is not this agent's default; the flag is required.
- AGENT.md11.0 kB
- agent.yaml1.5 kB
- LICENSE1.1 kB
- README.md166 B
README.md
server-maintenance-audit
Audits a Linux server you name: checks its logs, looks up package CVEs, applies the updates you ask for, and schedules a reboot you want.