Security audit
Security checks for vulnerabilities and agentic risk
This is a Redis configuration review skill that reads relevant Redis and application settings, produces advice, and does not contain hidden execution, persistence, or destructive behavior.
Install this if you want Redis Sentinel or Cluster configuration review. Point it only at Redis configs and relevant client code, and review any generated remediation before applying changes because Redis configs may include secrets and production-impacting settings.
The manifest trigger phrase "redis" is overly broad and can cause this skill to activate in many contexts that merely mention Redis, including unrelated or mixed-scope tasks. Over-broad activation increases the chance the agent will read unnecessary files, inspect broader application code, or provide authoritative infrastructure guidance outside the user's intended scope.
The focused prompts like "Check memory policies and eviction strategy" and "Analyze connection pooling settings" do not themselves require Redis context, so the skill may be invoked for generic infrastructure or application tasks that are not Redis-specific. That ambiguity can lead to scope confusion and unintended analysis of application code or system configuration beyond the user's actual request.
Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.
/etc/security/limits.conf: redis soft nofile 65535
OR: Reduce maxclients to match available FDs
FAIL: timeout = 0 (no idle timeout)
Idle connections never close — accumulate until maxclients reached
RISK: Connection leak exhausts available connections
FIX: timeout 300 (close idle connections after 5 minutes)
No suspicious patterns detected.