← Back to Skills Marketplace
134
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install prisma-api
Description
Interact with the Strata Cloud Manager (SCM) API to manage Prisma Access configurations. Authenticate, query, create, update, and delete configuration object...
Usage Guidance
This skill is internally consistent with its stated purpose, but it can perform destructive actions (create/update/delete and push candidate configs) against your Prisma Access tenant. Before installing: (1) verify the GitHub homepage and author trustworthiness; (2) store SCM_CLIENT_ID/SCM_CLIENT_SECRET/SCM_TSG_ID securely (do not hard-code into scripts); (3) run commands in a test/non-production tenant first; (4) ensure logging does not capture Authorization headers or raw tokens; (5) give the credential only the minimal permissions necessary and rotate it if you suspect misuse. The skill is instruction-only (no code installed locally), so its runtime behavior will be exactly the curl/jq calls shown in SKILL.md.
Capability Analysis
Type: OpenClaw Skill
Name: prisma-api
Version: 1.1.0
The skill is a legitimate tool for managing Palo Alto Networks Prisma Access via the Strata Cloud Manager (SCM) API. It uses standard OAuth2 authentication and interacts with official Palo Alto Networks endpoints (api.sase.paloaltonetworks.com). The instructions in SKILL.md include safety guidelines such as requiring user confirmation for configuration pushes and logging all API calls, with no evidence of data exfiltration or malicious execution.
Capability Tags
Capability Assessment
Purpose & Capability
Name and description match the required items: the skill needs SCM_CLIENT_ID, SCM_CLIENT_SECRET, SCM_TSG_ID and uses curl/jq to call Palo Alto Networks auth and API endpoints — these are appropriate for interacting with Strata Cloud Manager.
Instruction Scope
SKILL.md only instructs obtaining an OAuth2 token and calling the declared SCM API endpoints (GET/POST/PUT/DELETE). It does not reference other files, system paths, or unrelated environment variables. One operational note: the doc recommends 'log all changes' and 'output every API call' — care is needed to avoid logging Authorization headers/tokens, which would expose secrets if logs are retained or transmitted.
Install Mechanism
Instruction-only skill with no install spec or downloads; lowest-risk delivery model (no code written to disk).
Credentials
Only SCM_CLIENT_ID, SCM_CLIENT_SECRET, and SCM_TSG_ID are required and are appropriate for OAuth2 client-credential access to the SCM API. No unrelated secrets or broad system credentials are requested.
Persistence & Privilege
Skill is not always-enabled and does not request system-wide persistence. disable-model-invocation is true (limits autonomous LLM invocation), which reduces autonomous risks rather than increasing them.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install prisma-api - After installation, invoke the skill by name or use
/prisma-api - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
## v1.1.0
Version bump. Updated homepage URL. Part of the v1.1.0 release adding migration compatibility matrix to prisma-migrate.
v1.0.1
## v1.0.0 Initial Release / 首次发布
### English
Execute SCM API operations for Prisma Access management.
**Capabilities:**
- OAuth2 authentication (Client ID + Client Secret → Bearer Token)
- CRUD operations for all SCM resource types (addresses, services, security rules, NAT, decryption, profiles, etc.)
- Candidate configuration push and job status monitoring
- Config version management
- Pagination support for large datasets
- Built-in error handling (401/429/400/409)
**Safety rules:** authenticate first, never auto-commit, dry-run when possible, respect rate limits, log all changes.
### 中文
执行 SCM API 操作以管理 Prisma Access。
**功能：**
- OAuth2 认证（客户端 ID + 密钥 → Bearer Token）
- 所有 SCM 资源类型的增删改查（地址、服务、安全规则、NAT、解密、配置文件等）
- 候选配置推送和任务状态监控
- 配置版本管理
- 大数据集分页支持
- 内置错误处理（401/429/400/409）
**安全规则：** 先认证、不自动提交、尽量试运行、遵守速率限制、记录所有变更。
v1.0.0
Initial release: SCM API operations for Prisma Access
Metadata
Frequently Asked Questions
What is prisma-api?
Interact with the Strata Cloud Manager (SCM) API to manage Prisma Access configurations. Authenticate, query, create, update, and delete configuration object... It is an AI Agent Skill for Claude Code / OpenClaw, with 134 downloads so far.
How do I install prisma-api?
Run "/install prisma-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is prisma-api free?
Yes, prisma-api is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does prisma-api support?
prisma-api is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created prisma-api?
It is built and maintained by H@CKMEN (@leesandao); the current version is v1.1.0.
More Skills