Kubernetes Network Root Cause Analysis
kubeshark/kubeshark
Investigates past Kubernetes incidents from Kubeshark traffic snapshots: takes captures, dissects API calls, extracts PCAPs and compares traffic over time.
Runs a phased health audit of a Cisco ACI fabric through MCP tools: node status, links, tenant and policy review, faults and endpoint learning.
Install Cisco ACI Fabric Health Audit
$ npx skills add automateyournetwork/netclaw --skill aci-fabric-audit -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install automateyournetwork/netclaw aci-fabric-audit --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .claude/skills && cp -r skills-src/workspace/skills/aci-fabric-audit .claude/skills/aci-fabric-audit && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "aci-fabric-audit" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/aci-fabric-audit into .claude/skills/aci-fabric-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aci-fabric-audit", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/aci-fabric-auditType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add automateyournetwork/netclaw --skill aci-fabric-audit -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install automateyournetwork/netclaw aci-fabric-audit --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .agents/skills && cp -r skills-src/workspace/skills/aci-fabric-audit .agents/skills/aci-fabric-audit && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "aci-fabric-audit" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/aci-fabric-audit into .agents/skills/aci-fabric-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aci-fabric-audit", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add automateyournetwork/netclaw --skill aci-fabric-audit -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install automateyournetwork/netclaw aci-fabric-audit --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/workspace/skills/aci-fabric-audit .cursor/skills/aci-fabric-audit && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "aci-fabric-audit" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/aci-fabric-audit into .cursor/skills/aci-fabric-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aci-fabric-audit", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/automateyournetwork/netclaw.git --path workspace/skills/aci-fabric-audit--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add automateyournetwork/netclaw --skill aci-fabric-audit -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install automateyournetwork/netclaw aci-fabric-audit --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/workspace/skills/aci-fabric-audit .gemini/skills/aci-fabric-audit && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "aci-fabric-audit" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/aci-fabric-audit into .gemini/skills/aci-fabric-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aci-fabric-audit", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install automateyournetwork/netclaw aci-fabric-auditInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add automateyournetwork/netclaw --skill aci-fabric-audit -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .github/skills && cp -r skills-src/workspace/skills/aci-fabric-audit .github/skills/aci-fabric-audit && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "aci-fabric-audit" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/aci-fabric-audit into .github/skills/aci-fabric-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aci-fabric-audit", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add automateyournetwork/netclaw --skill aci-fabric-audit -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install automateyournetwork/netclaw aci-fabric-audit --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/workspace/skills/aci-fabric-audit .opencode/skills/aci-fabric-audit && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "aci-fabric-audit" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/aci-fabric-audit into .opencode/skills/aci-fabric-audit/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "aci-fabric-audit", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
aci-fabric-audit- GitHub stars
- 677
- Token cost
- ~2.9k tokens
- SKILL.md length
- 837 words
- Files
- 1
- Skills in repo
- 120
- Repo updated
- First seen
- Licence
- Apache-2.0
At a glance
Runs a phased health audit of a Cisco ACI fabric through MCP tools: node status, links, tenant and policy review, faults and endpoint learning.
- Works in 5 steps: Fabric Node Health → Tenant / VRF / BD / EPG Policy Audit → Contract Analysis → …
- Running a daily or weekly Cisco ACI fabric health check
- SKILL.md covers How to Call the ACI MCP Tools, When to Use, Audit Procedure and Audit Report Format, plus 3 more sections
- Calls python3; needs ACI_PASSWORD
What it does
This skill walks an agent through a fixed-order health audit of a Cisco ACI fabric by calling ACI MCP tools through an `mcp-call` wrapper, with the APIC address and login passed as environment variables. It covers node status, tenant, VRF, bridge domain and EPG policy review, contract analysis, fault triage and endpoint learning checks. It suits scheduled daily or weekly checks, baselines before and after a change, incident response, tenant policy compliance reviews and leaf and spine capacity planning.
The audit runs in strict phases, each building on the last. Phase 1 lists fabric nodes with ID, name, role, serial number, admin and operational state, firmware and model, then checks pods and fabric links. A node that is not available is flagged critical, as is a link that is not up, while mixed firmware within a role, inactive nodes and single-homed spines are warnings. Phase 2 walks the policy tree from tenants down, flagging tenants missing from an approved registry, then examines VRF contexts. The text available here ends partway through phase 2.
When your agent uses it
- Running a daily or weekly Cisco ACI fabric health check
- Capturing a baseline before an ACI policy change and comparing afterward
- Triaging faults when an ACI-related alert fires
- Reviewing tenant, VRF and contract hygiene on an APIC
Example prompts
- “Audit the ACI fabric health and tell me which nodes or links need attention.”
- “Capture a pre-change baseline of the fabric before we edit the contract policies.”
- “After the change window, check that no new faults appeared on the APIC.”
Requirements
- An APIC reachable with its URL, username and password set as environment variables
- The ACI MCP server script and the `mcp-call` helper
- Python 3
Workflow steps
5 steps, taken from the step headings in SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit f943637. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
python3
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names these keys or tokens, usually read from environment variables:
ACI_PASSWORD
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Cisco ACI Fabric Health Audit loads about 2.9k tokens when it runs. Until then it costs about 77 tokens; SKILL.md has 837 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from automateyournetwork/netclaw at commit f943637, republished under its Apache-2.0 licence (© automateyournetwork). 837 words, ~2,870 tokens.
Download SKILL.mdSave it as
.claude/skills/aci-fabric-audit/SKILL.md (or your agent's skills folder).- name
- aci-fabric-audit
- description
- Comprehensive Cisco ACI fabric health audit - node status, tenant/VRF/BD/EPG policy review, contract analysis, fault triage, and endpoint learning verification. Use when auditing ACI fabric health, checking for faults, reviewing tenant policies, or running pre/post-change baselines on APIC.
- license
- Apache-2.0
- user-invocable
- true
ACI Fabric Health Audit
How to Call the ACI MCP Tools
All ACI tool calls use mcp-call with environment variables set as a prefix:
APIC_URL=$APIC_URL USERNAME=$ACI_USERNAME PASSWORD=$ACI_PASSWORD python3 $MCP_CALL "python3 -u $ACI_MCP_SCRIPT" TOOL_NAME '{"param":"value"}'When to Use
- Scheduled daily/weekly fabric health checks
- Pre-change baseline capture before any ACI policy modification
- Post-change validation to confirm no new faults appeared
- Incident response when ACI-related alerts fire
- Compliance audits for tenant policy and contract hygiene
- Capacity planning for leaf/spine utilization
Audit Procedure
Always run the audit in this exact order. Each phase builds on the previous one.
Phase 1: Fabric Node Health
Verify all leaf and spine switches are registered, healthy, and running expected firmware.
1A: Enumerate Fabric Nodes
APIC_URL=$APIC_URL USERNAME=$ACI_USERNAME PASSWORD=$ACI_PASSWORD python3 $MCP_CALL "python3 -u $ACI_MCP_SCRIPT" fabric_nodes '{}'Extract and report:
- Node ID, name, role (leaf/spine/controller), serial number
- Admin state and operational state
- Fabric firmware version
- Model and TEP address
Flags:
- Node operational state != "available" -> CRITICAL
- Mixed firmware versions across same role -> WARNING
- Node decommissioned or inactive -> WARNING
1B: Fabric Pods
APIC_URL=$APIC_URL USERNAME=$ACI_USERNAME PASSWORD=$ACI_PASSWORD python3 $MCP_CALL "python3 -u $ACI_MCP_SCRIPT" fabric_pods '{}'Verify all pods are healthy and reachable.
1C: Fabric Links
APIC_URL=$APIC_URL USERNAME=$ACI_USERNAME PASSWORD=$ACI_PASSWORD python3 $MCP_CALL "python3 -u $ACI_MCP_SCRIPT" fabric_links '{}'Flags:
- Link operState != "up" -> CRITICAL: Fabric interconnect down
- Single-homed spine (only one link) -> WARNING: No redundancy
Phase 2: Tenant / VRF / BD / EPG Policy Audit
Systematically walk the ACI policy tree from tenant down to EPG.
2A: Enumerate All Tenants
APIC_URL=$APIC_URL USERNAME=$ACI_USERNAME PASSWORD=$ACI_PASSWORD python3 $MCP_CALL "python3 -u $ACI_MCP_SCRIPT" tenants_get '{}'Record the full tenant list. Flag any unexpected tenants (not in the approved tenant registry).
2B: VRF Contexts per Tenant
APIC_URL=$APIC_URL USERNAME=$ACI_USERNAME PASSWORD=$ACI_PASSWORD python3 $MCP_CALL "python3 -u $ACI_MCP_SCRIPT" fvCtx_get '{}'Flags:
- VRF with pcEnfPref set to "unenforced" -> WARNING: No contract enforcement
- VRF with no bridge domains attached -> WARNING: Orphaned VRF
2C: Bridge Domains
APIC_URL=$APIC_URL USERNAME=$ACI_USERNAME PASSWORD=$ACI_PASSWORD python3 $MCP_CALL "python3 -u $ACI_MCP_SCRIPT" fvBD_get '{}'Flags:
- BD with unicastRoute disabled -> WARNING: No L3 routing
- BD with arpFlood enabled and limitIpLearnToSubnets disabled -> WARNING: Broadcast storm risk
- BD not associated with any VRF -> CRITICAL: Misconfiguration
- BD with no subnets -> WARNING: L2-only BD, verify intentional
2D: Application Profiles
APIC_URL=$APIC_URL USERNAME=$ACI_USERNAME PASSWORD=$ACI_PASSWORD python3 $MCP_CALL "python3 -u $ACI_MCP_SCRIPT" fvAp_get '{}'Enumerate application profiles to understand the logical grouping of EPGs.
2E: Endpoint Groups
APIC_URL=$APIC_URL USERNAME=$ACI_USERNAME PASSWORD=$ACI_PASSWORD python3 $MCP_CALL "python3 -u $ACI_MCP_SCRIPT" fvAEPg_get '{}'Flags:
- EPG with no static bindings and no VMM domain -> WARNING: No path to physical or virtual infra
- EPG with no contracts (neither consumer nor provider) -> WARNING: Isolated EPG, no communication possible
- EPG with floodOnEncap enabled -> WARNING: Potential broadcast issues
Phase 3: Contract Analysis
Audit contracts for security hygiene -- look for overly permissive rules and unused contracts.
3A: List All Contracts
APIC_URL=$APIC_URL USERNAME=$ACI_USERNAME PASSWORD=$ACI_PASSWORD python3 $MCP_CALL "python3 -u $ACI_MCP_SCRIPT" contracts_get '{}'Flags:
- Contract with scope "global" and subject filter permitting all (ether type unspecified) -> CRITICAL: Any-to-any rule
- Contract with no subjects -> WARNING: Empty contract, no rules defined
- Contract with no consumers or no providers -> WARNING: Unused contract
- Contract scope "tenant" with cross-tenant consumer -> WARNING: Verify intent
3B: Analyze Contract Subjects and Filters
For each contract returned, inspect the subjects and filters. Look for:
- Filters allowing IP protocol 0 (unspecified) -> CRITICAL: Permits all traffic
- Filters allowing TCP/UDP with dFromPort=0 and dToPort=65535 -> WARNING: Full port range open
- Taboo contracts with broad deny rules -> INFO: Document these for compliance
Phase 4: Fault Analysis
4A: Retrieve All Faults
APIC_URL=$APIC_URL USERNAME=$ACI_USERNAME PASSWORD=$ACI_PASSWORD python3 $MCP_CALL "python3 -u $ACI_MCP_SCRIPT" faults '{}'Categorize and count by severity:
| Severity | Action |
|---|---|
| critical | Immediate triage required |
| major | Schedule remediation within 24 hours |
| minor | Review in next maintenance window |
| warning | Informational, track trending |
Flags:
- Any critical faults -> CRITICAL: Report immediately
- Major fault count > 10 -> WARNING: Systemic issue suspected
- Faults with lifecycle "raised" (not acknowledged) -> WARNING: Unacknowledged faults
Show full SKILL.md (328 more words)Show less
4B: Health Scores
APIC_URL=$APIC_URL USERNAME=$ACI_USERNAME PASSWORD=$ACI_PASSWORD python3 $MCP_CALL "python3 -u $ACI_MCP_SCRIPT" health '{}'Thresholds:
- Health score >= 95 -> HEALTHY
- Health score 80-94 -> WARNING
- Health score 60-79 -> HIGH
- Health score < 60 -> CRITICAL
Phase 5: Endpoint Learning Verification
Verify that endpoints are being learned correctly across the fabric.
5A: Check Endpoint Learning
Look for:
- Duplicate MAC addresses learned on different leaves -> CRITICAL: Possible loop
- Endpoints bouncing between ports (frequent EP moves) -> WARNING: Instability
- Static endpoints not present in the endpoint table -> WARNING: Connectivity issue
Audit Report Format
Always produce a consolidated summary:
ACI Fabric Audit Report
========================
APIC: $APIC_URL
Timestamp: YYYY-MM-DD HH:MM UTC
Fabric Summary
--------------
Pods: 1 | Nodes: 6 (2 spine, 4 leaf) | All nodes available: YES
Firmware: 6.0(3e) uniform across all nodes
Policy Summary
--------------
Tenants: 5 | VRFs: 8 | BDs: 23 | App Profiles: 12 | EPGs: 47
+--------------------+----------+----------------------------------+
| Check | Status | Details |
+--------------------+----------+----------------------------------+
| Fabric Nodes | HEALTHY | 6/6 nodes available |
| Fabric Links | HEALTHY | All inter-switch links up |
| Tenant Policy | WARNING | 2 EPGs with no contracts |
| VRF Enforcement | HEALTHY | All VRFs enforced |
| Bridge Domains | WARNING | 1 BD with no subnet |
| Contracts | CRITICAL | 1 any-to-any contract found |
| Faults (Critical) | HEALTHY | 0 critical faults |
| Faults (Major) | WARNING | 3 major faults (unacknowledged) |
| Health Score | HEALTHY | 97/100 |
| Endpoint Learning | HEALTHY | No duplicate MACs detected |
+--------------------+----------+----------------------------------+
Overall: WARNING -- 4 items need attention, 1 CRITICAL contract issue
Critical Findings
-----------------
1. [CRITICAL] Contract "default" in tenant "prod" permits all traffic
- Scope: global | Subject filter: implicit-allow
- Recommendation: Replace with explicit per-port filters
2. [WARNING] EPG "web-servers" in tenant "prod" has no provider contracts
- No inbound communication path defined
- Recommendation: Attach appropriate provider contract
3. [WARNING] BD "legacy-bd" has no subnet configured
- L2-only mode, verify this is intentional
...Severity order: CRITICAL > HIGH > WARNING > HEALTHY. Overall status = worst individual status.
Integration with Other Skills
GAIT Audit Trail
After completing the audit, record the session in GAIT:
python3 $MCP_CALL "python3 -u $GAIT_MCP_SCRIPT" gait_record_turn '{"user_text":"Example only: replace with the actual authorized request.","assistant_text":"ACI fabric audit completed on APIC $APIC_URL: Nodes HEALTHY (6/6), Policy WARNING (2 EPGs no contracts), Contracts CRITICAL (1 any-to-any), Faults WARNING (3 major), Health 97/100. Overall: WARNING.","artifacts":[]}'Markmap Tenant Hierarchy
Generate an interactive mind map of the tenant hierarchy:
python3 $MCP_CALL "node $MARKMAP_MCP_SCRIPT" markmap_generate '{"markdown_content":"# ACI Fabric\n## Tenant: prod\n### VRF: prod-vrf\n#### BD: web-bd\n##### EPG: web-servers\n##### EPG: app-servers\n#### BD: db-bd\n##### EPG: db-servers\n## Tenant: shared\n### VRF: shared-l3out\n#### BD: external-bd"}'Draw.io Fabric Topology
Generate a visual fabric topology diagram:
python3 $MCP_CALL "npx -y @drawio/mcp" open_drawio_mermaid '{"content":"graph TD\n subgraph \"Pod 1\"\n APIC1[\"APIC-1\"]\n S1[\"Spine-1\"]\n S2[\"Spine-2\"]\n L1[\"Leaf-1\"]\n L2[\"Leaf-2\"]\n L3[\"Leaf-3\"]\n L4[\"Leaf-4\"]\n S1 --- L1\n S1 --- L2\n S1 --- L3\n S1 --- L4\n S2 --- L1\n S2 --- L2\n S2 --- L3\n S2 --- L4\n end"}'Output
The audit produces:
- A structured text report with severity ratings per check area
- A list of critical findings with actionable recommendations
- Optional markmap visualization of tenant hierarchy
- Optional Draw.io diagram of fabric topology
- GAIT audit trail entry for compliance records
Failure Behavior
- If a tool call fails with an authentication or connection error, check that
ACI_MCP_SCRIPT,ACI_PASSWORD,ACI_USERNAME,APIC_URL,GAIT_MCP_SCRIPT,MARKMAP_MCP_SCRIPTare set and valid before assuming a data or device problem. - On a tool error (timeout, unreachable host, malformed response), report the failure and its error message directly to the user rather than fabricating or guessing at results.
- For a confirmed read-only call, check connectivity and retry once if appropriate. For any call that changes state or sends a message, a timeout does not prove the action failed: inspect current state or delivery status before retrying, preserve the required approval/change gates, and do not repeat an action whose outcome is unknown.
Audit examples are illustrative. Replace request, outcomes, identifiers and counts
with observed session evidence; do not record these example results as facts.
Inspect MCP isError, returned ok, and the recorded turn with gait_show when
validating a new client/schema. Follow gait-session-tracking for branch checkout.
© automateyournetwork, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in workspace/skills/aci-fabric-audit of automateyournetwork/netclaw.
Open the folder on GitHubat commit f943637
Compare with similar skills
Cisco ACI Fabric Health Audit next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Cisco ACI Fabric Health Audit this skillautomateyournetwork/netclaw | 677 | — | ~2.9k | Automated safety check: Pass | Apache-2.0 | |
| Kubernetes Network Root Cause Analysiskubeshark/kubeshark | 12k | — | ~5.3k | Automated safety check: Pass | Apache-2.0 | |
| Syncmetapawurb/hotpath-rs | 1.9k | — | ~1.2k | Automated safety check: Notes | MIT | |
| UModel Root Cause Analysisalibaba/UnifiedModel | 415 | — | ~1.9k | Automated safety check: Pass | Custom licence | |
| Greptimedb Perses DashboardGreptimeTeam/dashboard | 111 | — | ~3.9k | Automated safety check: Pass | Apache-2.0 | |
| Unifienuno/unifi-mcp-server | 284 | — | ~1k | Automated safety check: Pass | Apache-2.0 |
Similar skills
Syncmeta
pawurb/hotpath-rs
Sync changes from the hotpath, hotpath-macros and hotpath-drain crates to their meta counterparts (hotpath-meta, hotpath-macros-meta and hotpath-drain-meta).
UModel Root Cause Analysis
alibaba/UnifiedModel
Investigates a service incident to its root cause by querying a UModel object graph alongside metrics, logs, topology and recent deployments.
Greptimedb Perses Dashboard
GreptimeTeam/dashboard
Generate Perses dashboards or single panels for GreptimeDB. An agent skill from GreptimeTeam/dashboard.
Unifi
enuno/unifi-mcp-server
Manage UniFi network infrastructure via the UniFi MCP Server.
- Official
Alerting Irm
grafana/skills
Configure Grafana Alerting, Incident Response Management (IRM), and SLOs end-to-end — provisions Grafana-managed and data-source-managed alert rules, contact points (Slack/PagerDuty/email/webhook)…
More from automateyournetwork/netclaw
All 120 skills in this repoEVE-NG Lab Topology Design
automateyournetwork/netclaw
Entry point for designing EVE-NG network labs: classifies the request, gathers missing requirements, proposes options and validates the resulting topology.
ACI Policy Change Deployment
automateyournetwork/netclaw
Deploys Cisco ACI policy changes only behind an approved ServiceNow Change Request, capturing pre and post-change fault baselines and rolling back automatically on a fault delta.
Anta Validation
automateyournetwork/netclaw
Validate Arista EOS network state against ANTA's pre-built 208-test catalogue, with structured pass/fail verdicts.
Arista Cvp
automateyournetwork/netclaw
Arista CloudVision Portal (CVP) automation via REST API — device inventory, events, connectivity monitoring, tag management (4 tools).
AWS Cloud Monitoring
automateyournetwork/netclaw
AWS CloudWatch monitoring — metrics, alarms, log queries, VPC flow log analysis, network performance.
Batfish Config Analysis
automateyournetwork/netclaw
Batfish network configuration analysis -- pre-deployment validation, reachability testing, ACL/firewall tracing, differential analysis, compliance checking.
Related
Works with
Categories
Questions about Cisco ACI Fabric Health Audit
What does Cisco ACI Fabric Health Audit do?
Runs a phased health audit of a Cisco ACI fabric through MCP tools: node status, links, tenant and policy review, faults and endpoint learning. This skill walks an agent through a fixed-order health audit of a Cisco ACI fabric by calling ACI MCP tools through an `mcp-call` wrapper, with the APIC address and login passed as environment variables. It covers node status, tenant, VRF, bridge domain and EPG policy review, contract analysis, fault triage and endpoint learning checks.
When should I use Cisco ACI Fabric Health Audit?
Cisco ACI Fabric Health Audit fits situations like: running a daily or weekly Cisco ACI fabric health check; capturing a baseline before an ACI policy change and comparing afterward; triaging faults when an ACI-related alert fires; reviewing tenant, VRF and contract hygiene on an APIC.
How do I install Cisco ACI Fabric Health Audit in Claude Code?
Run `npx skills add automateyournetwork/netclaw --skill aci-fabric-audit -a claude-code`. Or copy the skill folder (workspace/skills/aci-fabric-audit in automateyournetwork/netclaw) into .claude/skills/aci-fabric-audit in your project. Claude Code loads it when a task matches its description.
How do I install Cisco ACI Fabric Health Audit in Codex?
Run `npx skills add automateyournetwork/netclaw --skill aci-fabric-audit -a codex`. Or copy the skill folder (workspace/skills/aci-fabric-audit in automateyournetwork/netclaw) into .agents/skills/aci-fabric-audit in your project. Codex loads it when a task matches its description.
Can I use Cisco ACI Fabric Health Audit in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add automateyournetwork/netclaw --skill aci-fabric-audit -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/aci-fabric-audit, .gemini/skills/aci-fabric-audit, .github/skills/aci-fabric-audit and .opencode/skills/aci-fabric-audit in your project.
What does Cisco ACI Fabric Health Audit need to run?
Going by SKILL.md and its folder, Cisco ACI Fabric Health Audit needs the command-line tools its instructions call (python3) and credentials named ACI_PASSWORD. Our summary lists: An APIC reachable with its URL, username and password set as environment variables; The ACI MCP server script and the `mcp-call` helper; Python 3.
Does Cisco ACI Fabric Health Audit access the network?
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Is Cisco ACI Fabric Health Audit safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Cisco ACI Fabric Health Audit use?
Cisco ACI Fabric Health Audit is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Cisco ACI Fabric Health Audit use?
About 2.9k tokens (SKILL.md is roughly 11k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Cisco ACI Fabric Health Audit?
Skills that share tags, products or a category with Cisco ACI Fabric Health Audit: Kubernetes Network Root Cause Analysis (kubeshark/kubeshark, 12k stars), Syncmeta (pawurb/hotpath-rs, 1.9k stars), UModel Root Cause Analysis (alibaba/UnifiedModel, 415 stars) and Greptimedb Perses Dashboard (GreptimeTeam/dashboard, 111 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Cisco ACI Fabric Health Audit?
automateyournetwork (a GitHub user) maintains it in automateyournetwork/netclaw, which has 677 GitHub stars. The repository holds 120 skills in this directory. The repository was last updated on October 11, 2026.
Source: automateyournetwork/netclaw on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.