[SeanEricKnight]

Summary

Builds the first working base model of unraid-security.

v1 functionality

• native Unraid WebGUI .page dashboard
• read-only Bash scanner with structured JSON output
• root account protection check
• Telnet and FTP listener checks
• SSH listener, empty-password, and password-authentication checks
• Public SMB user-share detection
• boot/flash SMB exposure check
• Public NFS export detection
• WebGUI TLS configuration check
• local management-listener summary
• installed Unraid version reporting

Safety and packaging

• no automatic remediation
• does not equate local listeners with proven WAN exposure
• installer downloads runtime source from immutable commit 7d9407a5c7ab32ca405237782e7a4394c2484a32, not mutable main

Validation

• insecure and secure fixture tests pass locally
• Bash syntax validation passes
• WebGUI PHP lint passes
• PLG XML validation passes

Known gap

This is a base v1 and has not yet been live-tested across real Unraid 6.12/7.x systems. Broader real-server testing should drive the next fixes before expanding scope.