ecc-network-config-reviewer

Reviews router and switch configurations for security risks with severity-ranked findings.

Updated Apr 18, 2025
One-click install
npx skills add https://github.com/adriancodes/dotfiles --skill ecc-network-config-reviewer-adriancodes
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ecc-network-config-reviewer
Source: https://github.com/adriancodes/dotfiles/tree/main/dot_agents/skills/ecc-network-config-reviewer
Command: npx skills add https://github.com/adriancodes/dotfiles --skill ecc-network-config-reviewer-adriancodes

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Auditing router, switch, and firewall configurations by hand is slow and error-prone, and missing a plaintext credential or an undefined ACL can expose a network. This Skill performs a read-only review of supplied Cisco IOS/IOS-XE style configurations and returns prioritized, evidence-backed findings. ## Core Features & Use Cases - Severity-ranked findings: Classifies issues as Critical, High, Medium, or Low, covering plaintext credentials, public SNMP communities, Telnet-only management, undefined ACLs, and missing NTP or logging. - Structured review report: Outputs findings with file/section references, evidence snippets, risk explanations, safe fixes, a severity summary table, and a PASS/WARNING/BLOCK verdict. - Read-only safety posture: Never connects to devices, runs commands, or edits files; it requests redacted operator-provided evidence such as show running-config output only when it changes a finding. - Use Case: Before a maintenance window, paste a proposed change snippet plus the existing running configuration, and receive a BLOCK verdict if the change contains a destructive command without a rollback plan. ## Quick Start Ask the assistant to review the supplied router or switch configuration for security risks and return a severity-ranked report with a PASS, WARNING, or BLOCK verdict.

Frequently Asked Questions about ecc-network-config-reviewer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a Cisco router configuration for security issues?▼

Supply the running configuration or proposed change snippet and the review parses interfaces, ACLs, VTY lines, AAA, SNMP, and logging blocks. It returns severity-ranked findings with evidence snippets, risk explanations, and safe remediation steps.

What network configuration issues count as critical findings?▼

Critical findings include plaintext or default credentials, SNMP community strings like public or private, Telnet-only management, unrestricted internet-facing VTY access, and destructive commands such as reload or erase without a rollback plan.

Can this review connect to my network devices directly?▼

No, the review is strictly read-only and never connects to devices, runs show commands, or edits files. It works only on supplied configuration text and may request redacted operator-provided output when it changes a finding.

When does a network config review return a BLOCK verdict?▼

A BLOCK verdict is issued for any Critical finding or a proposed destructive change lacking a rollback plan. WARNING applies to High or Medium findings that do not block a maintenance window, and PASS requires no actionable findings.

What are the limitations of a read-only configuration review?▼

The review cannot verify live device state, so findings rely solely on the supplied configuration and caller-provided evidence. Anything not observable in the text is reported as residual risk rather than verified.