What problem does it solve? JumpServer administrators often need to answer questions about assets, permissions, audit logs, and daily usage without manually composing API calls or CLI commands. This Skill routes natural-language requests to formal read-only entrypoints (jms_query.py, jms_diagnose.py, jms_report.py) with preflight checks, organization selection, and structured blocking responses instead of guesswork. ## Core Features & Use Cases - Object and permission queries: Look up assets, accounts, users, nodes, platforms, organizations, permission rules, ACLs, and effective user access scope (which assets, nodes, accounts, and protocols a user can reach). - Audit investigation: Search page-style login logs, session records, command records, file transfers, high-risk commands, and failed logins with explicit time windows and capability-based aggregate analysis. - Governance inspection and usage reports: Run 67 capability units for asset/account governance and system checks, and generate complete HTML daily or time-range usage reports from a fixed template. - Use Case: Ask "Which assets can user example.user access in the Default organization?" or "Show me yesterday's bastion host usage" and receive either a structured effective-access answer or a validated HTML report at reports/JumpServer-YYYY-MM-DD.html. ## Quick Start Tell the agent your JumpServer URL and authentication method (AK/SK or username/password) so it can generate the .env file, then ask a question like "show me yesterday's JumpServer usage report".