This is a case of social engineering, not of a security auditor, but of the poster. The poster wants to know an easy way to collect public and private SSH keys and fake 6 months of inbound traffic. There is no auditor.

Maybe the poster is writing a book on cracking systems? Who knows. But it smells like a hoax.