Back to Details

audit-hosting

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Audit hosting

托管审计

Read-only from start to finish. The output is a report; every fix is a separate, confirmed step through another skill.
全程只读。输出为一份报告；每项修复都需通过另一个 skill 单独执行并确认。

Calling the operations

调用操作

  • Read the 
    inputSchema
    that 
    search
    returns before the first call of each operation. If a name below is rejected as unknown, 
    search
    for what the step does (e.g. "ssl status").
  • Batch reads with 
    multi-execute
    , up to 20 steps a batch. Batches chain operations from one server only — the Hostinger Connector runs 
    hosting
    , 
    wordpress
    , 
    agency-hosting
    and 
    billing
    as separate servers. When a product group is switched off, skip its checks and say which were skipped.
  • Page every list until 
    meta.total
    is covered.
  • Leave 
    hosting_php_get
    out — it is large and says nothing about account health.
  • 首次调用每项操作前，先读取 
    search
    返回的 
    inputSchema
    。如果下方某个名称被提示为未知，请通过 
    search
    查询该步骤的功能（例如 
    ssl status
    ）。
  • 使用 
    multi-execute
    批量读取，每批最多 20 个步骤。一个批次只能串联来自同一服务器的操作——Hostinger Connector 将 
    hosting
    、
    wordpress
    、
    agency-hosting
    和 
    billing
    作为独立服务器运行。某产品组已关闭时，跳过其检查，并说明跳过了哪些检查。
  • 为每个列表持续翻页，直至覆盖 
    meta.total
    中的全部项目。
  • 排除 
    hosting_php_get
    ——它数据量很大，且无法说明账户的健康状况。

1. Inventory

1. 清单

One batch per server:
  • hosting_orders_list
    with 
    statuses: ["active", "suspended"]
    . 
    cloud_*
    plan names are Cloud; the rest (
    hostinger_premium_*
    , 
    hostinger_business_*
    , …) are Shared.
  • hosting_websites_list
    — every Shared and Cloud website with 
    website_type
    , 
    username
    , 
    order_id
    and 
    is_enabled
    (false means suspended).
  • wordpress_installations_list
    with 
    ownership: "all"
    — 
    id
    , 
    is_valid
    , 
    validation_error
    .
  • agency-hosting_orders_list
    and 
    agency-hosting_websites_list-plan
    — Agency orders and sites (
    details.uid
    , 
    details.type
    , 
    details.domains
    , 
    details.state
    ).
Tell the user the size (plans, websites, WordPress installs) before the checks. For large accounts offer to scope the audit to one order or domain.
每个服务器一个批次：
  • hosting_orders_list
    ，参数为 
    statuses: ["active", "suspended"]
    。
    cloud_*
    套餐名称属于 Cloud；其余套餐（
    hostinger_premium_*
    、
    hostinger_business_*
    等）属于 Shared。
  • hosting_websites_list
    ——获取所有 Shared 和 Cloud 网站及其 
    website_type
    、
    username
    、
    order_id
    和 
    is_enabled
    （false 表示已暂停）。
  • wordpress_installations_list
    ，参数为 
    ownership: "all"
    ，用于获取 
    id
    、
    is_valid
    、
    validation_error
    。
  • agency-hosting_orders_list
    和 
    agency-hosting_websites_list-plan
    ——获取 Agency 订单和站点（
    details.uid
    、
    details.type
    、
    details.domains
    、
    details.state
    ）。
开始检查前，先告知用户账户规模（套餐、网站、WordPress 安装数量）。对于大型账户，可建议将审计范围限定为一个订单或域名。

2. Checks

2. 检查

Per Shared and Cloud website (skip 
builder
and 
horizons
):
  • hosting_websites_get-settings
    — in 
    ssl
    , flag 
    failed
    (with 
    last_error
    ), 
    expired
    , 
    not_installed
    on a custom domain, 
    is_https_redirect_enabled: false
    , and 
    expires_at
    within 30 days when 
    is_lifetime
    is false; lifetime certificates renew on their own. In 
    cache
    , flag 
    is_cacheless_mode_enabled: true
    (development mode left on) and 
    is_enabled: false
    .
  • Node.js sites: 
    hosting_get-deployment
    (latest build failed? 
    build.state
    ) and 
    hosting_nodejs_list-vulnerabilities
    with 
    severities: ["critical", "high"]
    .
Per hosting account (
username
): 
hosting_databases_list
— flag 
disk_usage_mb
above 80% of 
max_size_mb
.
Per WordPress install: 
wordpress_installations_show-core-version
(core vulnerabilities) and 
wordpress_plugins_list-installed
(vulnerable plugins and pending updates).
Per Agency order: 
agency-hosting_metrics_list-order-resource-usage
with 
time_frame_hours: 168
and 
agency-hosting_metrics_list-plan-order-disk-usage
with 
time_frame_days: 7
— flag usage above 80% of the plan quota and name the heaviest websites.
Per Agency site: 
agency-hosting_ssl_website-status
for each custom domain in 
details.domains
; flag 
details.state
other than 
active
.
Plans about to lapse (billing product): 
billing_subscriptions_list
, joined to hosting orders on 
subscription_id
— flag 
not_renewing
, or 
is_auto_renewed: false
with 
expires_at
within 30 days. Every site on that plan goes down with it.
From outside, for each custom domain:
bash
curl -sS -o /dev/null -w "%{http_code}\n" --max-time 15 https://DOMAIN/
curl -sSI --max-time 15 https://DOMAIN/ | grep -i "^platform"
No 
platform: hostinger
header means the domain does not reach this hosting.
对于每个 Shared 和 Cloud 网站（跳过 
builder
和 
horizons
）：
  • hosting_websites_get-settings
    ——在 
    ssl
    中，标记 
    failed
    （附上 
    last_error
    ）、
    expired
    、自定义域名为 
    not_installed
    、
    is_https_redirect_enabled: false
    ，以及 
    is_lifetime
    为 false 时 
    expires_at
    距到期不足 30 天的情况；终身证书会自动续期。在 
    cache
    中，标记 
    is_cacheless_mode_enabled: true
    （仍处于开发模式）和 
    is_enabled: false
    。
  • 对于 Node.js 网站：使用 
    hosting_get-deployment
    （检查最新构建是否失败：
    build.state
    ），并使用 
    hosting_nodejs_list-vulnerabilities
    ，设置 
    severities: ["critical", "high"]
    。
对于每个托管账户（
username
）：使用 
hosting_databases_list
——标记 
disk_usage_mb
超过 
max_size_mb
80% 的情况。
对于每个 WordPress 安装：使用 
wordpress_installations_show-core-version
（检查核心漏洞）和 
wordpress_plugins_list-installed
（检查存在漏洞的插件及待处理更新）。
对于每个 Agency 订单：使用 
agency-hosting_metrics_list-order-resource-usage
，设置 
time_frame_hours: 168
；并使用 
agency-hosting_metrics_list-plan-order-disk-usage
，设置 
time_frame_days: 7
——标记资源使用量超过套餐配额 80% 的情况，并列出用量最高的网站。
对于每个 Agency 站点：针对 
details.domains
中的每个自定义域名使用 
agency-hosting_ssl_website-status
；标记 
details.state
非 
active
的情况。
即将失效的套餐（billing 产品）：使用 
billing_subscriptions_list
，并通过 
subscription_id
与托管订单关联——标记 
not_renewing
，或 
is_auto_renewed: false
且 
expires_at
距到期不足 30 天的套餐。该套餐上的所有网站也会随之下线。
从外部针对每个自定义域名执行：
bash
curl -sS -o /dev/null -w "%{http_code}\n" --max-time 15 https://DOMAIN/
curl -sSI --max-time 15 https://DOMAIN/ | grep -i "^platform"
如果响应中没有 
platform: hostinger
标头，则该域名未指向此托管服务。

3. Report

3. 报告

undefined
undefined

Hosting audit

托管审计

3 plans (2 Shared, 1 Cloud) + 1 Agency · 14 websites (6 WordPress, 3 Node.js, 5 other) · 4 Agency sites
3 个套餐（2 个 Shared、1 个 Cloud）+ 1 个 Agency · 14 个网站（6 个 WordPress、3 个 Node.js、5 个其他）· 4 个 Agency 网站

Fix now

立即修复

  • shop.example.com — latest Node.js build failed 2 days ago → troubleshoot-website
  • blog.example.com — contact-form-x 5.2 has a known vulnerability, fixed in 5.3 → maintain-wordpress
  • shop.example.com — 2 天前最新 Node.js 构建失败 → troubleshoot-website
  • blog.example.com — contact-form-x 5.2 存在已知漏洞，已在 5.3 中修复 → maintain-wordpress

Soon

尽快处理

  • example.org — Business plan expires in 12 days, auto-renew off → renew in hPanel
  • Agency order 1000000001 — 86% of disk quota, mostly client-a.com
  • example.org — Business 套餐将在 12 天后到期，自动续订已关闭 → 在 hPanel 中续订
  • Agency 订单 1000000001 — 磁盘配额已使用 86%，主要来自 client-a.com

Worth knowing

值得注意

  • 4 WordPress installs have pending plugin updates → maintain-wordpress
  • 4 个 WordPress 安装有待处理的插件更新 → maintain-wordpress

Healthy

健康

docs.example.com, portfolio.example.com, …

- **Fix now:** site down or not reaching Hostinger, failed latest build, invalid WordPress install, SSL `failed` or `expired`, critical vulnerabilities, suspended website.
- **Soon:** high vulnerabilities, a plan lapsing within 30 days, usage above 80% of a quota, HTTPS redirect off, non-lifetime certificates expiring.
- **Worth knowing:** pending updates, inactive plugins with vulnerabilities.

Each item names the evidence and the skill that fixes it: `troubleshoot-website`, `maintain-wordpress`, `connect-domain` or `deploy-to-hosting`. Patchable npm vulnerabilities on GitHub-deployed sites can be fixed with `hosting_nodejs_patch-vulnerabilities`, which opens a pull request — offer it, do not run it as part of the audit.
docs.example.com、portfolio.example.com、……

- **立即修复：**网站宕机或未指向 Hostinger、最新构建失败、WordPress 安装无效、SSL `failed` 或 `expired`、严重漏洞、网站已暂停。
- **尽快处理：**高危漏洞、套餐将在 30 天内失效、资源使用量超过配额 80%、HTTPS 重定向关闭、非终身证书即将到期。
- **值得注意：**待处理的更新、存在漏洞的非活动插件。

每项问题都应列明证据和对应的修复 skill：`troubleshoot-website`、`maintain-wordpress`、`connect-domain` 或 `deploy-to-hosting`。对于通过 GitHub 部署的网站，可使用 `hosting_nodejs_patch-vulnerabilities` 修复可打补丁的 npm 漏洞；该操作会创建一个 pull request。应当向用户提供此选项，但不要在审计过程中运行。

Not available through the API

无法通过 API 获取的内容

CPU and memory usage for Shared and Cloud plans, website backup status, and PHP error logs. Mention them once at the end so the user knows what the audit could not see.
Shared 和 Cloud 套餐的 CPU 与内存使用量、网站备份状态以及 PHP 错误日志。最后统一说明一次，让用户了解审计未能查看的内容。