About

Imported from CX330Blake/dotfiles (.agents/skills-archive/performing-ssl-tls-security-assessment/SKILL.md). Install upstream with npx skills add CX330Blake/dotfiles --skill performing-ssl-tls-security-assessment. Copyright stays with the author (Apache-2.0).

Performing SSL/TLS Security Assessment

Name: performing-ssl-tls-security-assessment
Author: CX330Blake

Overview

Assess SSL/TLS server configurations using sslyze, a fast Python-based scanning library. This skill covers evaluating supported protocol versions (SSLv2/3, TLS 1.0-1.3), cipher suite strength, certificate chain validation, HSTS enforcement, OCSP stapling, and scanning for known vulnerabilities including Heartbleed, ROBOT, and session renegotiation weaknesses.

When to Use

When conducting security assessments that involve performing ssl tls security assessment
When following incident response procedures for related security events
When performing scheduled security testing or auditing activities
When validating security controls through hands-on testing

Prerequisites

Python 3.9+ with sslyze library (pip install sslyze)
Network access to target HTTPS servers on port 443
Understanding of TLS protocol versions and cipher suite classifications

Steps

Step 1: Configure Server Scan

Create ServerScanRequest with ServerNetworkLocation specifying target hostname and port.

Step 2: Execute TLS Scan

Use sslyze Scanner to queue and execute scans for all TLS check commands concurrently.

Step 3: Analyze Results

Evaluate accepted cipher suites, certificate validity, protocol versions, and vulnerability scan results.

Step 4: Generate Security Report

Produce a JSON report with compliance findings and remediation recommendations.

Expected Output

JSON report with supported protocols, accepted cipher suites, certificate details, vulnerability results (Heartbleed, ROBOT), and HSTS status.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/cx330blake-dotfiles-performing-ssl-tls-security-assessment/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

cx330blake-dotfiles-performing-ssl-tls-security-assessment.ocm.jsonjson

{
  "ocm": "1",
  "id": "cx330blake-dotfiles-performing-ssl-tls-security-assessment",
  "kind": "skill",
  "name": "performing-ssl-tls-security-assessment",
  "description": "Assess SSL/TLS server configurations using the sslyze Python library to evaluate cipher suites, certificate chains, protocol versions, HSTS headers, and known vulnerabilities like Heartbleed and ROBOT.",
  "publisher": "CX330Blake",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "coding"
    ],
    "tags": [
      "skill-md",
      "network-security",
      "ssl",
      "tls",
      "sslyze",
      "certificate",
      "cipher-suites",
      "vulnerability-assessment",
      "github"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Assess SSL/TLS server configurations using the sslyze Python library to evaluate cipher suites, certificate chains, protocol versions, HSTS headers, and known vulnerabilities like Heartbleed and ROBOT."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github",
      "repository": "https://github.com/CX330Blake/dotfiles",
      "path": ".agents/skills-archive/performing-ssl-tls-security-assessment/SKILL.md",
      "ref": "83852b2713f415465294fe5a5ae3ccc56135d328",
      "url": "https://github.com/CX330Blake/dotfiles/blob/83852b2713f415465294fe5a5ae3ccc56135d328/.agents/skills-archive/performing-ssl-tls-security-assessment/SKILL.md",
      "key": "CX330Blake/dotfiles/.agents/skills-archive/performing-ssl-tls-security-assessment/SKILL.md"
    },
    "license": "Apache-2.0"
  },
  "instructions": "# Performing SSL/TLS Security Assessment\n\n## Overview\n\nAssess SSL/TLS server configurations using sslyze, a fast Python-based scanning library. This skill covers evaluating supported protocol versions (SSLv2/3, TLS 1.0-1.3), cipher suite strength, certificate chain validation, HSTS enforcement, OCSP stapling, and scanning for known vulnerabilities including Heartbleed, ROBOT, and session renegotiation weaknesses.\n\n\n## When to Use\n\n- When conducting security assessments that involve performing ssl tls security assessment\n- When following incident response procedures for related security events\n",
  "cost": {
    "context_tokens": 399
  }
}

Fetch it by URL: GET /api/v1/registry/cx330blake-dotfiles-performing-ssl-tls-security-assessment/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.