firewall-review

Parse multi-vendor firewall exports into unified auditable rule models.

3|1|Updated May 26, 2026
One-click install
npx skills add https://github.com/LeoWSY-hashblue/-communitytools-custom --skill firewall-review-leowsy-hashblue
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: firewall-review
Source: https://github.com/LeoWSY-hashblue/-communitytools-custom/tree/main/skills/firewall-review
Command: npx skills add https://github.com/LeoWSY-hashblue/-communitytools-custom --skill firewall-review-leowsy-hashblue

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Claude-native firewall ruleset audit across vendors is hard to reproduce and trust; this toolkit standardizes parsing, detection, and reporting into auditable findings with versioned citations.

Core Features & Use Cases

  • Vendor-agnostic parsing converts FortiGate, PAN-OS, Cisco ASA/IOS, Azure NSG, AWS SG, and iptables exports into a unified NormalizedRule model.
  • Deterministic detectors and a learning loop produce audit-grade findings with chain-of-custody provenance and framework citations.
  • Agent roles (coordinator, executor, validator) and a coupling of PDF/Excel report rendering enable production-grade security audits.

Quick Start

Drop pre-requisites into Pre-requisites and run /launch to start the audit.

Frequently Asked Questions about firewall-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit firewall rules across multiple vendors like FortiGate, PAN-OS, and Cisco ASA?

Multi-vendor firewall rule audits are standardized by parsing diverse exports from FortiGate, PAN-OS, Cisco ASA/IOS, Azure NSG, AWS SG, and iptables into a single NormalizedRule model. This unified model enables consistent end-to-end detections and authoritative reporting.

Can I generate compliance reports from AWS Security Group and Azure NSG exports?

Compliance reports from AWS Security Group and Azure NSG exports are generated through deterministic detectors coupled with PDF and Excel report rendering. These audit-grade findings include chain-of-custody provenance and framework citations for authoritative reporting.

What is the best way to normalize iptables and FortiGate configurations for security detection?

Normalizing iptables and FortiGate configurations involves converting vendor-specific syntax into a unified NormalizedRule model. Applying deterministic detectors to this model ensures reproducible security detections and audit-grade findings across diverse firewall environments.

Does this firewall audit approach support deterministic verification with versioned citations?

Deterministic verification is fully supported, providing audit-grade findings with versioned citations and chain-of-custody provenance. A learning loop drives catalog improvements, ensuring firewall rule audits remain reproducible and trustworthy.

How do I start an end-to-end firewall rule audit using parsed exports?

To start an end-to-end firewall rule audit, drop your pre-requisites into the Pre-requisites section and run the launch command. Agent roles including coordinator, executor, and validator manage the parsing, detection, and reporting workflow.