SSH Key Hygiene Kit

SSH keys accumulate. A departing employee, a forgotten jump box, a migration that never got fully cleaned up — and suddenly you have authorized_keys files you've never audited, with keys whose owners you can't identify. The problem isn't awareness. It's that you've never had a fast, inspectable tool that shows you exactly what's there. The SSH Key Hygiene Kit is a read-only audit toolkit that scans your SSH key estate and surfaces what needs attention: weak encryption algorithms, keys with no identifying comments, duplicates across files, and permission settings that shouldn't be in production. Each script auto-saves a dated report on the machine you run it from, so your audit trail starts the moment the scan finishes. Run it on a single host in 2 minutes. Point the fleet wrapper at a hostlist and get an aggregated summary across 50 servers in one command. Works on macOS without any Homebrew prerequisites — Bash 3.2 compatible out of the box.