Palo Alto Firewall Audit

PAN-OS zone-based security policy audit with App-ID/Content-ID analysis, Security Profile Group validation, zone protection assessment, and decryption policy...

This skill appears to describe a legitimate read-only Palo Alto firewall audit: the commands and procedures are appropriate. Before installing, confirm these points: (1) Which credential(s) are actually required — the SKILL.md mentions PAN_API_KEY but the registry lists none. If a PAN_API_KEY is required, only supply a key scoped to read-only access and limited to the specific Panorama/firewall hosts. (2) Ask the publisher why the metadata declares egress to *.paloaltonetworks.com:443 and an mcp dependency; verify whether the skill needs to reach Palo Alto cloud services (Pan-DB/WildFire) or an MCP helper — if not, restrict egress. (3) Prefer using local management endpoints (firewall or Panorama IPs) rather than exposing keys to external services. (4) If you have low tolerance for ambiguity, request an update with consistent registry metadata (declared env vars and dependencies) before enabling the skill. These inconsistencies look like sloppy packaging rather than outright malicious behavior, but they should be resolved before usage.

Type: OpenClaw Skill Name: palo-alto-firewall-audit Version: 1.0.0 The skill bundle is a legitimate security audit tool for Palo Alto Networks PAN-OS firewalls. It provides a structured methodology for evaluating security policies, App-ID adoption, and zone protections using read-only CLI and API commands (e.g., 'show running security-policy'). The instructions in SKILL.md and the references in cli-reference.md and policy-model.md are consistent with professional network security auditing practices and contain no evidence of malicious intent, data exfiltration, or unauthorized execution.