Nsg Firewall Auditor

Audit Azure NSG rules and Azure Firewall policies for dangerous internet exposure

This skill is instruction-only and appears coherent, but take these precautions before using it: (1) Run the az commands locally yourself and review the JSON output — do not paste any credentials, tokens, or connection strings. (2) If you must share data, redact or replace sensitive identifiers and public IPs when possible, or share a sanitized example. (3) Use least-privilege roles locally (Reader is sufficient for many exports; Network Contributor is only needed for some effective-rule queries). (4) The skill will produce recommended CLI commands and tightened JSON — review those before applying them in your environment. (5) Note the skill lists a price and 'pack' metadata in its header; this is informational and not required to run the guidance. If you need the auditor to run commands directly against your subscription, prefer a vetted tool or grant temporary, audited access rather than pasting secrets into chat.

Type: OpenClaw Skill Name: nsg-firewall-auditor Version: 1.0.0 The skill is explicitly designed as 'instruction-only' and states it 'does not execute any Azure CLI commands or access your Azure account directly.' It instructs the agent to analyze user-provided data and explicitly forbids asking for credentials or secret keys, further instructing the agent to confirm no credentials are included in user-pasted data. While 'bash' is listed as a tool, its implied use is for displaying example commands, not for executing commands based on user-provided data, which is stated to be analyzed by 'Claude'. There is no evidence of malicious intent, data exfiltration, or unauthorized execution in the `SKILL.md` instructions.