← Back to Skills Marketplace
116
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install prisma-troubleshoot
Description
Troubleshoot Prisma Access issues including GlobalProtect connectivity, policy matching, tunnel status, SCM API errors, and configuration push failures. Use...
Usage Guidance
This skill appears to do what it says: it calls the Strata Cloud Manager API and therefore legitimately needs SCM credentials and curl. Before installing or running it: 1) Prefer scoped or read-only SCM credentials for troubleshooting; avoid supplying full admin secrets unless you intend to push changes. 2) Review any proposed POST/push commands before execution — the skill lists endpoints that can change configuration. 3) Test in a non-production environment where possible and confirm actions are audited. 4) Verify the GitHub homepage/repo yourself (https://github.com/leesandao/prismaaccess-skill) to confirm source and review any additional guidance or examples. If you want to prevent accidental changes, do not provide write-scoped secrets or avoid letting the agent execute API write calls autonomously.
Capability Analysis
Type: OpenClaw Skill
Name: prisma-troubleshoot
Version: 1.1.0
The skill bundle is a troubleshooting guide for Prisma Access via Strata Cloud Manager (SCM). It provides diagnostic steps and API endpoint references for an AI agent to use when resolving connectivity and configuration issues. While it requires sensitive environment variables (SCM_CLIENT_SECRET), the instructions in SKILL.md are strictly aligned with the stated purpose and contain no evidence of malicious intent, data exfiltration, or unauthorized execution.
Capability Assessment
Purpose & Capability
Name/description, required binaries (curl), and required env vars (SCM_CLIENT_ID, SCM_CLIENT_SECRET, SCM_TSG_ID) are consistent with interacting with the Strata Cloud Manager API to diagnose Prisma Access issues.
Instruction Scope
SKILL.md stays on-topic (diagnostics for GlobalProtect, policy matching, tunnels, API errors, config pushes) and lists SCM API endpoints. It includes both read-only GETs and a POST for pushing candidate configs — so while troubleshooting is expected to call the SCM API, the presence of push endpoints means the agent (or a user following its instructions) could make configuration changes. The doc does not instruct reading unrelated files or other env vars.
Install Mechanism
Instruction-only skill with no install steps or third-party downloads; lowest install risk. It only requires curl to be present on PATH.
Credentials
The three required env vars appear directly related to SCM API usage (client id/secret for OAuth and TSG ID for authorization/tenant scoping). The primaryEnv is set to SCM_CLIENT_ID. Requesting a client secret is expected for authenticated API calls, but callers should provide least-privilege credentials.
Persistence & Privilege
always is false and the skill is not requesting persistent/privileged platform-level presence or modifying other skills' configs. Autonomous invocation is allowed (platform default) but not a unique privilege here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install prisma-troubleshoot - After installation, invoke the skill by name or use
/prisma-troubleshoot - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
## v1.1.0
Version bump. Updated homepage URL. Part of the v1.1.0 release adding migration compatibility matrix to prisma-migrate.
v1.0.1
## v1.0.0 Initial Release / 首次发布
### English
Diagnose and resolve common Prisma Access issues via SCM.
**Troubleshooting areas:**
- GlobalProtect connectivity (certificates, SAML, HIP, DNS, MTU)
- Security policy matching (rule ordering, shadow rules, zone confusion, App-ID)
- Configuration push failures (reference errors, duplicates, concurrent edits)
- Remote Network / Service Connection (IKE/IPSec, BGP, overlapping IPs)
- SCM API errors (400/401/403/404/409/429/500/504 with solutions)
- Performance and latency (bandwidth, QoS, routing, session limits)
### 中文
通过 SCM 诊断和解决常见的 Prisma Access 问题。
**故障排查领域：**
- GlobalProtect 连接（证书、SAML、HIP、DNS、MTU）
- 安全策略匹配（规则顺序、影子规则、区域混淆、App-ID）
- 配置推送失败（引用错误、重复、并发编辑）
- 远程网络/服务连接（IKE/IPSec、BGP、IP 重叠）
- SCM API 错误（400/401/403/404/409/429/500/504 及解决方案）
- 性能和延迟（带宽、QoS、路由、会话限制）
v1.0.0
Initial release: troubleshoot Prisma Access common issues
Metadata
Frequently Asked Questions
What is prisma-troubleshoot?
Troubleshoot Prisma Access issues including GlobalProtect connectivity, policy matching, tunnel status, SCM API errors, and configuration push failures. Use... It is an AI Agent Skill for Claude Code / OpenClaw, with 116 downloads so far.
How do I install prisma-troubleshoot?
Run "/install prisma-troubleshoot" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is prisma-troubleshoot free?
Yes, prisma-troubleshoot is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does prisma-troubleshoot support?
prisma-troubleshoot is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created prisma-troubleshoot?
It is built and maintained by H@CKMEN (@leesandao); the current version is v1.1.0.
More Skills