jarvis-securelisted

One-command laptop security sweep + speed/hardening pass for Windows (Jarvis core). Read-only audit first (Defender status, threat history, live connections, listening ports, firewall, autoruns, scheduled tasks, network neighbors), then OPTIONAL hardening (Public firewall inbound block, disable SMB1, remove Lenovo SoftLanding bloat) and OPTIONAL cleanup (measure %TEMP%/caches/Recycle Bin, then clean safe targets). Ends with a hardware verdict (RAM / SSD vs HDD / CPU / free disk / power plan). Use when user says "run jarvis", "antivirus scan", "scan my laptop", "scan my network", "is my laptop safe", "clean temp files", "make my laptop faster", "security check", "/jarvis-secure", "harden my pc", or asks to check the machine/network for threats.
waseemnasir2k26/skynetlabs-all-claude-code · ★ 0 · AI & Automation · score 62

Install: claude install-skill waseemnasir2k26/skynetlabs-all-claude-code

# Jarvis Secure — Windows laptop security + speed sweep Windows-only (PowerShell). Three phases: **AUDIT (read-only)** → **HARDEN (opt-in)** → **CLEANUP + speed verdict (opt-in)**. Never run destructive/irreversible steps without explicit user yes. Caveman-mode safe (general terse, security/multi-step normal). ## HARD RULES (learned, do not violate) - **Measure before delete.** Always size temp/cache/Recycle Bin and show the table BEFORE removing anything. - **Recycle Bin = irreversible.** Never `Clear-RecycleBin` without explicit confirm — it can hold GBs the user wants back. - **SSD = NEVER defrag.** Check `MediaType`. If SSD, do not suggest/run defrag (TRIM auto-handles; defrag wears it). - **Elevation: don't fight quote-escaping.** `Start-Process -Verb RunAs` with inline `-Command "...\"...\""` reliably fails to parse. Instead WRITE a `.ps1` file and run it elevated via `-File`. Have it log result to a text file you can Read back (the non-elevated session can't read elevated stdout). - **Cleaning %TEMP% deletes Claude's own task-output file.** Expect one "output file could not be read" error after a temp clean — harmless; re-measure to confirm. - **Public Wi-Fi with one MAC for all IPs = client isolation (proxy-ARP).** Peers unreachable BY DESIGN — can't scan them, don't claim you can. Advise VPN + no plaintext logins. ## PHASE 1 — AUDIT (read-only, run in parallel) ```powershell # Defender status + threat history Get-MpComputerStatus | Select AMServiceEnabled,RealTi