skills.rest
automateyournetwork
automateyournetworkCOMMUNITY
Explore all skills by this author →
Website𝕏@john_capobiancoGitHub

aci-fabric-audit

Audit Cisco ACI fabric health and configurations via APIC API calls.

627|175|Updated Feb 19, 2026
Search Tags:#audit#policy compliance#cisco#network health#aci#fabric management
One-click install
npx skills add https://github.com/automateyournetwork/netclaw --skill aci-fabric-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aci-fabric-audit
Source: https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/aci-fabric-audit
Command: npx skills add https://github.com/automateyournetwork/netclaw --skill aci-fabric-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the comprehensive auditing of Cisco ACI fabric health, policy compliance, and operational status, identifying critical misconfigurations and potential issues before they impact the network.

Core Features & Use Cases

  • Fabric Node Health: Verifies the status, firmware, and connectivity of all leaf and spine switches.
  • Policy Audit: Reviews tenant, VRF, Bridge Domain, and EPG configurations for compliance and potential risks like unenforced contracts or orphaned objects.
  • Contract Analysis: Identifies overly permissive or unused contracts, ensuring security hygiene.
  • Fault Triage: Aggregates and categorizes fabric faults by severity for prioritized remediation.
  • Endpoint Verification: Checks for correct endpoint learning and potential issues like duplicate MAC addresses.
  • Use Case: Run this audit weekly to ensure your ACI fabric remains healthy, secure, and compliant with organizational policies, catching issues like an "any-to-any" contract before it causes a security incident.

Quick Start

Perform a comprehensive audit of the ACI fabric connected to the configured APIC.

Frequently Asked Questions about aci-fabric-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Cisco ACI fabric health and policy compliance?▼

This audit identifies misconfigurations in ACI fabric by reviewing tenant policies, VRF contexts, bridge domains, EPG configurations, contracts, faults, and endpoint learning through APIC API calls to ensure operational health and security.

What security risks can an ACI policy audit identify?▼

An ACI policy audit identifies security risks like overly permissive or unused contracts, unenforced contracts, orphaned objects, and duplicate MAC addresses to maintain security hygiene across the fabric.

How do I check ACI fabric faults and triage them by severity?▼

You can check ACI fabric faults by running an audit that aggregates and categorizes all fabric faults by severity, allowing you to prioritize remediation for operational issues impacting the network.

Do I need specific MCP scripts and environment variables to audit an ACI fabric?▼

Yes, auditing an ACI fabric requires configuring environment variables for the APIC URL, username, and password, along with specific MCP scripts designed for executing the ACI API interactions.

Does this ACI audit verify the status and firmware of leaf and spine switches?▼

Yes, the ACI audit verifies fabric node health by checking the status, firmware, and connectivity of all leaf and spine switches to ensure the network infrastructure operates correctly.

What is the best way to catch an any-to-any contract issue in an ACI fabric?▼

The best way to catch an any-to-any contract issue is to perform a weekly contract analysis audit that identifies overly permissive or unused contracts before they cause a security incident.

Related Skills

Explore More Software Engineering Skills→
dgethingsdgethings

aci-fabric-audit

Automate Cisco ACI fabric health audits and generate consolidated reports.

Community
Advanced
webrix-aiwebrix-ai
1

vulnerability-prioritization

Correlate CVE scan results with infrastructure to prioritize patching and create Jira tickets.

Official
Advanced
briannadoubtbriannadoubt

observability

Configure structured logs, metrics, and traces for Trebuchet actors with CloudWatch export.

Community
Intermediate
dgethingsdgethings

aci-change-deploy

Automates ACI policy change workflows by coordinating ServiceNow records with APIC deployments.

Community
Advanced