EdgeIQ Client Dashboard

A client portal providing per-customer security dashboards, scan histories, risk scores, alert summaries, and report access with token-based login and JSON d...

Security Scan

The skill's code, instructions, and resource needs are coherent with a local, stdlib-only client dashboard; it does not request unrelated credentials or an installer and appears to implement the stated APIs and storage model.

Purpose & Capability

Name/description (client security dashboard) align with the included files: a stdlib-only Python HTTP server, sample client JSON files, and SKILL.md/README describing the same APIs and features. No unrelated credentials, binaries, or install steps are requested.

Instruction Scope

SKILL.md instructs running the bundled Python script and POSTing scan JSONs — this matches the code. The dashboard stores client records as JSON files under the DATA_DIR and exposes the documented endpoints. Note: token handling is ephemeral by default (a token is auto-generated on first run unless AUTH_TOKEN is set); if you don't persist AUTH_TOKEN you may lose access after restart. Also review how report URLs and file-serving are implemented (serve paths, path traversal) before running exposed to the Internet.

Install Mechanism

No install spec — instruction-only with a bundled script. No external downloads, package managers, or archive extraction are used.

Credentials

Only optional environment variables are used (AUTH_TOKEN, DASHBOARD_PORT, DASHBOARD_DATA_DIR). No unrelated secrets or cloud credentials are requested; the declared environment usage matches the code and README.

Persistence & Privilege

always is false and the skill does not request elevated platform privileges. It persists its own client JSON files in a configurable data directory under the repo by default; it does not attempt to modify other skills or system-wide configs.

Assessment

This appears to be a coherent, local dashboard you can run on a trusted host. Before installing: (1) set AUTH_TOKEN in your environment or .env to a secure value so the generated token isn't lost on restart; (2) run it behind a reverse proxy (TLS) and firewall if exposed to the network; (3) inspect the remainder of scripts/dashboard.py (endpoints that serve reports or files) for path-traversal or file-serving behaviour before making it internet-accessible; (4) restrict who can POST scan data (the token is the only access control); and (5) if you plan to host it publicly, review logs/console output handling to avoid leaking the token into system logs. No other unexpected credentials, installs, or opaque network behavior were found in the provided files.

Metadata

• Name: edgeiq-client-dashboard
• Version: 1.0.0
• Category: Security Intelligence / Client Portal
• Skill Bundle: EdgeIQ Labs Core Bundle

---

Purpose

A per-customer client portal that displays scan history, SSL expirations, risk scores, alert summaries, and self-serve access to generated reports. Customers log in to see their security posture at a glance. Designed to be the customer-facing front-end that ties the entire EdgeIQ tool suite together into a managed security service offering.

---

Tiers

Free

• 1 client
• 3 targets max
• Basic risk score (text summary only)
• Plain-text report links
• Community support

Pro — $29/month

• Unlimited clients
• Unlimited targets
• Full risk scoring algorithm (critical findings, open ports, SSL issues, alert frequency)
• PDF report access and generation
• Scheduled email digest
• Slack and Telegram integration for alert delivery
• Priority support

Bundle

• Included with all EdgeIQ skill bundles
• Full feature access across all tiers

---

Features

• Client Overview Dashboard — At-a-glance view of all clients with overall risk score per client
• Per-Client View — Targets, last scan date, SSL expiry timeline, recent alerts, risk score breakdown
• Report Access — Downloadable PDF and HTML reports per client
• Alert History — Full alert log with severity, source, and timestamp
• Risk Score Engine — Algorithm driven by critical findings, open ports, SSL certificate issues, and alert frequency
• JSON Data Ingestion — POST endpoint accepts scan result JSONs from EdgeIQ scanning tools to update client records
• Alert Summary API — JSON endpoint returning aggregated alerts across all clients
• Token Auth — Simple token-based login; auto-generates credentials on first run
• Cron-Friendly — Runs as a lightweight persistent service or in one-shot mode for data ingestion
• Stdlib Only — Zero pip dependencies; built entirely on Python standard library

---

Usage Examples

Start the dashboard (service mode)

python3 scripts/dashboard.py
# Dashboard available at http://localhost:8080
# Token printed to console on first run

One-shot data ingestion

python3 scripts/dashboard.py --oneshot

Feed scan results via POST

curl -X POST http://localhost:8080/api/clients/acme-corp/scan \
  -H "Authorization: Bearer <TOKEN>" \
  -H "Content-Type: application/json" \
  -d '{"target": "acme.com", "findings": [{"severity": "critical", "title": "Open SQL database"}]}'

Fetch alert summary

curl http://localhost:8080/api/alerts \
  -H "Authorization: Bearer <TOKEN>"

---

Legal Notice

EdgeIQ Client Dashboard is provided as-is for authorized security monitoring purposes only. You are solely responsible for ensuring you have explicit permission to scan and monitor any targets or systems accessible through this portal. Unauthorized scanning or monitoring of systems you do not have rights to may violate applicable laws including the Computer Fraud and Abuse Act (CFAA) and similar state or international legislation.

EdgeIQ Labs and its authors accept no liability for misuse of this tool. Use responsibly and within the bounds of your authorization agreements.