such a long shell script, didn't read it carefully but i bet the 'author' doesn't really know what they just wrote.. don't use this.
post
It looks like an automation script for their Fedora hardening guide, and I don't understand why they don't refer to it in their script instead of telling you to ask an AI.
From a cursory read of the code I can't see anything malicious, but the red flags are requiring root to run, being over 6400 lines long, vibe coded and some dubious coding decisions (like re-reading /etc/passwd multiple times, munging separate checks together in functions) - I wouldn't run it myself on anything important, even if it looks like it could be handy.
Looks like a scam to me. It can do all these tests to find security issues, but instead of telling you how to fix things (or do it itself) it has you input it to an AI?
Alternatively, you could create a proxmox VM with you OS setup or whatever really, and the use it to scan that just to fiddle around with it.
all 4 comments