1. Habit
  2. Skills
  3. Redis Security skill
redis · 2K installs

Redis Security skill
Runs by itself, weekly Redis audit.

Redis stays locked down.

Install the Redis Security skill and make it a habit: follow https://gethabit.dev/skills/redis/redis-security.md

  1. 1Copy
  2. 2Paste into Claude Code, Codex or Cursor
  3. 3It runs by itself

2K installs169 starsMIT licenceSource on GitHub ↗

Redis Security

by redis · 2K installs

The skill

The redis security skill helps ops and backend teams harden Redis for production with authentication, TLS, least-privilege ACL users, bind and protected-mode, firewall rules and disabled dangerous commands.

Only when you ask.

The habit

Redis stays locked down.

↻ Runs by itselfweekly Redis audit

How the habit works.
You don't have to.

Three questionsWhen does it start? How does it check its work? What does it remember?

01

It starts by itself

weekly Redis audit. Runs in Claude Code routine or cron.

  • ↻ weekly Redis audit
  • 0 5 * * 1

02

It checks its work

hardening checklist passes. If a check fails, it tells you.

  • ✓requirepass or ACL users are set
  • ✓tls-port is configured
  • ✓no bind 0.0.0.0 with protected-mode no
  • ✓application ACL users exclude @dangerous

03

It remembers

audit results log. The next run reads it first: last audit result per instance.

loops/redis-hardening-loop/run-log.md

One run, step by step.
Then it stops.

Stop ruleStops after one Redis instance per run.

  1. 01

    Read config

    Read redis.conf for auth, TLS, bind, protected-mode and rename-command lines.

  2. 02

    Check ACLs

    Confirm each application has its own ACL user with only the commands and keys it needs.

  3. 03

    Check network

    Confirm firewall rules allow only application subnets on the Redis port.

  4. 04

    Compare

    Compare with the last audit and flag anything that got weaker.

  5. 05

    Report

    List gaps across all three areas, since one alone leaves a gap.

What it may do.
Nothing more.

Safe by defaultIt writes only in its own folder and asks you before anything goes out.

Is it for you?
Use it when it fits.

Quick checkRead both lists. If the left one sounds like you, the Redis Security skill helps.

Use it when

  • ✓ You deploy Redis to production
  • ✓ A scanner reports exposed Redis
  • ✓ You define ACL users per app

Skip it when

  • – Redis runs only on your laptop
  • – You use a fully managed Redis with fixed settings

Questions

Redis Security skill, answered.

Does it change redis.conf?

No. The loop audits and reports; you apply the fixes.

Is requirepass enough?

The skill prefers ACL users and calls requirepass the legacy default user shortcut.

How do I install the Redis Security skill?

Copy the prompt at the top into your agent. It installs the skill from redis/agent-skills and sets up the habit. Or run npx skills add redis/agent-skills --skill redis-security.

Is the Redis Security skill free?

Yes. It is published under MIT. Habit is free too.

Redis Security. Now as a habit.

Install the Redis Security skill and make it a habit: follow https://gethabit.dev/skills/redis/redis-security.md

  • Free
  • No account
  • Undo in one line

All redis skills →More ops skills →

Works in

  • Claude Code
  • Codex
  • Cursor
  • ChatGPT
  • Claude app

Made by redis, published under MIT. Habit links to the original and never changes it. Is this your skill?

Copying didn't work here. Select the line and copy it by hand.