firewall-review

Parse multi-vendor firewall exports into unified auditable rule models.

3|1|Updated May 26, 2026
One-click install
npx skills add https://github.com/LeoWSY-hashblue/-communitytools-custom --skill firewall-review-leowsy-hashblue
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: firewall-review
Source: https://github.com/LeoWSY-hashblue/-communitytools-custom/tree/main/skills/firewall-review
Command: npx skills add https://github.com/LeoWSY-hashblue/-communitytools-custom --skill firewall-review-leowsy-hashblue

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Claude-native firewall ruleset audit across vendors is hard to reproduce and trust; this toolkit standardizes parsing, detection, and reporting into auditable findings with versioned citations.

Core Features & Use Cases

  • Vendor-agnostic parsing converts FortiGate, PAN-OS, Cisco ASA/IOS, Azure NSG, AWS SG, and iptables exports into a unified NormalizedRule model.
  • Deterministic detectors and a learning loop produce audit-grade findings with chain-of-custody provenance and framework citations.
  • Agent roles (coordinator, executor, validator) and a coupling of PDF/Excel report rendering enable production-grade security audits.

Quick Start

Drop pre-requisites into Pre-requisites and run /launch to start the audit.

Frequently Asked Questions about firewall-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit firewall rules across multiple vendors like FortiGate, PAN-OS, and Cisco ASA?▼

Multi-vendor firewall rule audits are standardized by parsing diverse exports from FortiGate, PAN-OS, Cisco ASA/IOS, Azure NSG, AWS SG, and iptables into a single NormalizedRule model. This unified model enables consistent end-to-end detections and authoritative reporting.

Can I generate compliance reports from AWS Security Group and Azure NSG exports?▼

Compliance reports from AWS Security Group and Azure NSG exports are generated through deterministic detectors coupled with PDF and Excel report rendering. These audit-grade findings include chain-of-custody provenance and framework citations for authoritative reporting.

What is the best way to normalize iptables and FortiGate configurations for security detection?▼

Normalizing iptables and FortiGate configurations involves converting vendor-specific syntax into a unified NormalizedRule model. Applying deterministic detectors to this model ensures reproducible security detections and audit-grade findings across diverse firewall environments.

Does this firewall audit approach support deterministic verification with versioned citations?▼

Deterministic verification is fully supported, providing audit-grade findings with versioned citations and chain-of-custody provenance. A learning loop drives catalog improvements, ensuring firewall rule audits remain reproducible and trustworthy.

How do I start an end-to-end firewall rule audit using parsed exports?▼

To start an end-to-end firewall rule audit, drop your pre-requisites into the Pre-requisites section and run the launch command. Agent roles including coordinator, executor, and validator manage the parsing, detection, and reporting workflow.