New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Implementing Next Generation Firewall With Palo Alto

by mukul975 in mukul975/Anthropic-Cybersecurity-Skills

Configures and deploys Palo Alto Networks next-generation firewalls end-to-end, covering App-ID application-aware policies, User-ID identity-based enforcement, zone-based security rules, SSL…

Apache-2.0Auto-check passedSecurity

Install Implementing Next Generation Firewall With Palo Alto

skills CLI
$ npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-next-generation-firewall-with-palo-alto -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install mukul975/Anthropic-Cybersecurity-Skills implementing-next-generation-firewall-with-palo-alto --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/implementing-next-generation-firewall-with-palo-alto .claude/skills/implementing-next-generation-firewall-with-palo-alto && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
implementing-next-generation-firewall-with-palo-alto
GitHub stars
34k
Token cost
~3.1k tokens
SKILL.md length
620 words
Files
8 (incl. scripts, references, assets)
Skills in repo
644
Repo updated
First seen
Licence
Apache-2.0

At a glance

Configures and deploys Palo Alto Networks next-generation firewalls end-to-end, covering App-ID application-aware policies, User-ID identity-based enforcement, zone-based security rules, SSL…

  • Works in 7 steps: Initial System Configuration → Configure Network Zones and Interfaces → Configure Zone Protection Profiles → …
  • Moving an enterprise from port-based firewall rules to application- and identity-aware NGFW policy on Palo Alto hardware
  • SKILL.md covers Overview, When to Use, Prerequisites and Core Concepts, plus 4 more sections
  • Runs Python scripts from its folder

What it does

Implementing Next Generation Firewall With Palo Alto is an agent skill from mukul975/Anthropic-Cybersecurity-Skills. Configures and deploys Palo Alto Networks next-generation firewalls end-to-end, covering App-ID application-aware policies, User-ID identity-based enforcement, zone-based security rules, SSL decryption for encrypted traffic visibility, and Content-ID threat prevention profiles. Use when moving an enterprise from port-based firewall rules to application- and identity-aware NGFW policy on Palo Alto hardware.

Its SKILL.md is about 3.1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 10 other files, including scripts, reference files and assets (for example `assets/template.md`, `references/api-reference.md` and `references/standards.md`).

It sits in Security, covering Cloud networking. The repository describes itself as: 817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io…. The licence is Apache-2.0.

When your agent uses it

  • Moving an enterprise from port-based firewall rules to application- and identity-aware NGFW policy on Palo Alto hardware
  • Tasks that involve Cloud networking

Example prompts

  • “Use the implementing-next-generation-firewall-with-palo-alto skill to configure and deploys Palo Alto Networks next-generation firewalls end-to-end…”
  • “/implementing-next-generation-firewall-with-palo-alto”

Requirements

  • Python 3

Workflow steps

7 steps, taken from the step headings in SKILL.md.

  1. Initial System Configuration
  2. Configure Network Zones and Interfaces
  3. Configure Zone Protection Profiles
  4. Configure Threat Prevention Profiles
  5. Configure SSL Decryption
  6. Build Security Policies
  7. Configure Logging and SIEM Integration

What it can do on your machine

Read from SKILL.md and the folder at commit 54a7988. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 2 files in scripts/ (Python), which the agent can run.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • docs.paloaltonetworks.com
    • paloaltonetworks.com
    • csrc.nist.gov

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Implementing Next Generation Firewall With Palo Alto loads about 3.1k tokens when it runs, and up to ~4.4k if it reads all its reference files. Until then it costs about 116 tokens; SKILL.md has 620 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~116
When it runs · the whole SKILL.md, loaded when a task matches
~3.1k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~4.4k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from mukul975/Anthropic-Cybersecurity-Skills at commit 54a7988, republished under its Apache-2.0 licence (© mukul975). 620 words, ~3,127 tokens.

Download SKILL.mdSave it as .claude/skills/implementing-next-generation-firewall-with-palo-alto/SKILL.md (or your agent's skills folder). This skill also uses 7 other files; get the full folder from GitHub.
name
implementing-next-generation-firewall-with-palo-alto
description
Configures and deploys Palo Alto Networks next-generation firewalls end-to-end, covering App-ID application-aware policies, User-ID identity-based enforcement, zone-based security rules, SSL decryption for encrypted traffic visibility, and Content-ID threat prevention profiles. Use when moving an enterprise from port-based firewall rules to application- and identity-aware NGFW policy on Palo Alto hardware.
domain
cybersecurity
subdomain
network-security
tags
palo-alto, ngfw, firewall, app-id, user-id, threat-prevention, network-security, ssl-decryption, zone-protection
version
1.0
author
mahipal
license
Apache-2.0
nist_csf
PR.IR-01, DE.CM-01, ID.AM-03, PR.DS-02
mitre_attack
T1046, T1040, T1557, T1071, T1553

Implementing Next-Generation Firewall with Palo Alto

Overview

Palo Alto Networks Next-Generation Firewalls (NGFWs) move beyond traditional port-based rule enforcement to application-aware, identity-driven security policies. By leveraging App-ID for traffic classification, User-ID for identity-based enforcement, Content-ID for threat inspection, and SSL decryption for encrypted traffic visibility, organizations gain comprehensive control over network traffic. This skill covers end-to-end deployment from initial configuration through advanced threat prevention profiles.

When to Use

  • When deploying or configuring implementing next generation firewall with palo alto capabilities in your environment
  • When establishing security controls aligned to compliance requirements
  • When building or improving security architecture for this domain
  • When conducting security assessments that require this implementation

Prerequisites

  • Palo Alto Networks PA-series appliance or VM-Series virtual firewall
  • PAN-OS 10.2 or later
  • Valid Threat Prevention, URL Filtering, and WildFire licenses
  • Network topology documentation with zone definitions
  • LDAP/Active Directory integration credentials for User-ID
  • Internal CA certificate for SSL Forward Proxy decryption

Core Concepts

App-ID Technology

App-ID classifies network traffic by application regardless of port, protocol, or encryption. The classification engine uses multiple identification techniques in sequence:

  1. Application Signatures - Pattern matching against known application signatures
  2. SSL/TLS Decryption - Decrypt traffic to identify applications hidden in encrypted tunnels
  3. Application Protocol Decoding - Decode protocols to find applications tunneled within them
  4. Heuristic Analysis - Behavioral analysis for applications that evade other methods

The Policy Optimizer tool assists migration from legacy port-based rules to App-ID rules by analyzing traffic logs and recommending application-specific replacements.

User-ID Integration

User-ID maps IP addresses to user identities through multiple methods:

  • Server Monitoring - Parses Windows Security Event Logs (Event IDs 4624, 4768, 4769)
  • Syslog Listening - Receives authentication events from RADIUS, 802.1X, proxies
  • GlobalProtect - Maps VPN users automatically
  • Captive Portal - Web-based authentication for unknown users
  • XML API - Programmatic user mapping from custom sources
Zone-Based Architecture

Zones represent logical segments of the network. Security policies control traffic between zones (inter-zone) and within zones (intra-zone):

ZonePurposeTrust Level
TrustInternal corporate LANHigh
UntrustInternet-facingNone
DMZPublic-facing serversMedium
GuestGuest wirelessLow
DataCenterServer infrastructureHigh

Workflow

Step 1: Initial System Configuration

Configure management interface, DNS, NTP, and system settings:

set deviceconfig system hostname PA-FW01
set deviceconfig system domain corp.example.com
set deviceconfig system dns-setting servers primary 10.0.1.10
set deviceconfig system dns-setting servers secondary 10.0.1.11
set deviceconfig system ntp-servers primary-ntp-server ntp-server-address 0.pool.ntp.org
set deviceconfig system timezone US/Eastern
set deviceconfig system login-banner "Authorized access only. All activity is monitored."
Step 2: Configure Network Zones and Interfaces

Define security zones and assign interfaces:

set zone Trust network layer3 ethernet1/1
set zone Untrust network layer3 ethernet1/2
set zone DMZ network layer3 ethernet1/3
set zone Guest network layer3 ethernet1/4

set network interface ethernet ethernet1/1 layer3 ip 10.10.0.1/24
set network interface ethernet ethernet1/1 layer3 interface-management-profile allow-ping
set network interface ethernet ethernet1/2 layer3 dhcp-client

set network virtual-router default interface [ ethernet1/1 ethernet1/2 ethernet1/3 ethernet1/4 ]
Show full SKILL.md (256 more words)Show less
Step 3: Configure Zone Protection Profiles

Protect against reconnaissance and DoS attacks at the zone level:

set network profiles zone-protection-profile Strict-ZP flood tcp-syn enable yes
set network profiles zone-protection-profile Strict-ZP flood tcp-syn alert-rate 100
set network profiles zone-protection-profile Strict-ZP flood tcp-syn activate-rate 500
set network profiles zone-protection-profile Strict-ZP flood tcp-syn maximal-rate 2000
set network profiles zone-protection-profile Strict-ZP flood tcp-syn syn-cookies enable yes

set network profiles zone-protection-profile Strict-ZP flood udp enable yes
set network profiles zone-protection-profile Strict-ZP flood icmp enable yes

set network profiles zone-protection-profile Strict-ZP scan 8003 action block-ip
set network profiles zone-protection-profile Strict-ZP scan 8003 interval 2
set network profiles zone-protection-profile Strict-ZP scan 8003 threshold 100
Step 4: Configure Threat Prevention Profiles

Create Anti-Virus, Anti-Spyware, Vulnerability Protection, and URL Filtering profiles:

# Anti-Spyware Profile
set profiles spyware Strict-AS botnet-domains lists default-paloalto-dns packet-capture single-packet
set profiles spyware Strict-AS botnet-domains sinkhole ipv4-address pan-sinkhole-default-ip
set profiles spyware Strict-AS rules Block-Critical severity critical action block-ip

# Vulnerability Protection Profile
set profiles vulnerability Strict-VP rules Block-Critical-High vendor-id any severity [ critical high ] action block-ip

# URL Filtering Profile
set profiles url-filtering Strict-URL credential-enforcement mode ip-user
set profiles url-filtering Strict-URL block [ command-and-control malware phishing ]
set profiles url-filtering Strict-URL alert [ hacking proxy-avoidance-and-anonymizers ]

# File Blocking Profile
set profiles file-blocking Strict-FB rules Block-Dangerous application any file-type [ bat exe msi ps1 vbs ] direction both action block

# WildFire Analysis Profile
set profiles wildfire-analysis Strict-WF rules Forward-All application any file-type any direction both analysis public-cloud
Step 5: Configure SSL Decryption

Set up SSL Forward Proxy for outbound traffic inspection:

# Generate Forward Trust CA certificate
request certificate generate certificate-name SSL-FP-CA algorithm RSA digest sha256 ca yes

# Create Decryption Profile
set profiles decryption Strict-Decrypt ssl-forward-proxy block-expired-certificate yes
set profiles decryption Strict-Decrypt ssl-forward-proxy block-untrusted-issuer yes
set profiles decryption Strict-Decrypt ssl-forward-proxy block-unknown-cert yes
set profiles decryption Strict-Decrypt ssl-forward-proxy restrict-cert-exts yes

# Create Decryption Policy
set rulebase decryption rules Decrypt-Outbound from Trust to Untrust source any destination any
set rulebase decryption rules Decrypt-Outbound action decrypt type ssl-forward-proxy
set rulebase decryption rules Decrypt-Outbound profile Strict-Decrypt

# Exclude sensitive categories (financial, healthcare)
set rulebase decryption rules No-Decrypt-Sensitive from Trust to Untrust
set rulebase decryption rules No-Decrypt-Sensitive category [ financial-services health-and-medicine ]
set rulebase decryption rules No-Decrypt-Sensitive action no-decrypt
Step 6: Build Security Policies

Create application-aware security policies with security profiles:

# Allow business applications from Trust to Internet
set rulebase security rules Allow-Business from Trust to Untrust
set rulebase security rules Allow-Business source-user any
set rulebase security rules Allow-Business application [ office365-enterprise salesforce-base slack-base zoom ]
set rulebase security rules Allow-Business service application-default
set rulebase security rules Allow-Business action allow
set rulebase security rules Allow-Business profile-setting group Strict-Security-Profiles

# Allow web browsing with URL filtering
set rulebase security rules Allow-Web from Trust to Untrust
set rulebase security rules Allow-Web application [ web-browsing ssl ]
set rulebase security rules Allow-Web action allow
set rulebase security rules Allow-Web profile-setting profiles url-filtering Strict-URL

# Block high-risk applications
set rulebase security rules Block-HighRisk from any to any
set rulebase security rules Block-HighRisk application [ bittorrent tor anonymizer ]
set rulebase security rules Block-HighRisk action deny
set rulebase security rules Block-HighRisk log-end yes

# Default deny rule (explicit)
set rulebase security rules Deny-All from any to any source any destination any
set rulebase security rules Deny-All application any service any action deny
set rulebase security rules Deny-All log-end yes
Step 7: Configure Logging and SIEM Integration

Forward logs to a SIEM for correlation:

# Configure Syslog Server Profile
set shared log-settings syslog SIEM-Server server SIEM transport UDP port 514 server 10.0.5.100
set shared log-settings syslog SIEM-Server server SIEM facility LOG_USER

# Configure Log Forwarding Profile
set shared log-settings profiles SIEM-Forward match-list Threats log-type threat
set shared log-settings profiles SIEM-Forward match-list Threats send-syslog SIEM-Server
set shared log-settings profiles SIEM-Forward match-list Traffic log-type traffic
set shared log-settings profiles SIEM-Forward match-list Traffic send-syslog SIEM-Server
set shared log-settings profiles SIEM-Forward match-list URL log-type url
set shared log-settings profiles SIEM-Forward match-list URL send-syslog SIEM-Server

Validation and Testing

  1. Policy Audit - Review with show running security-policy and check for shadowed rules
  2. Traffic Verification - Monitor Traffic logs for application classification accuracy
  3. Threat Simulation - Use EICAR test file and known-bad URLs to validate threat profiles
  4. SSL Decryption Test - Verify certificate chain in browser matches Forward Trust CA
  5. Zone Protection Test - Run controlled SYN flood to verify SYN cookie activation
  6. Policy Optimizer - Run Policy Optimizer to identify remaining port-based rules
bash
# Verify active sessions
show session all filter application web-browsing

# Check threat log entries
show log threat direction equal backward

# Verify App-ID classification
show running application-override

# Check system resources
show system resources

Best Practices

  • Least Privilege - Start with deny-all and explicitly allow only required applications
  • App-ID Over Port - Replace port-based rules with application-specific rules using Policy Optimizer
  • Decryption Coverage - Decrypt at least 80% of SSL traffic with appropriate privacy exclusions
  • Security Profile Groups - Apply Anti-Virus, Anti-Spyware, Vulnerability, URL Filtering, File Blocking, and WildFire as a group
  • Signature Updates - Enable automatic daily content updates for Applications and Threats
  • HA Configuration - Deploy in active/passive HA pair for production environments
  • Commit Validation - Always validate configuration before committing: validate full

References

© mukul975, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 7 other files (scripts, references, assets) in skills/implementing-next-generation-firewall-with-palo-alto of mukul975/Anthropic-Cybersecurity-Skills.

  • SKILL.md
  • LICENSE
  • assets/template.md
  • references/api-reference.md
  • references/standards.md
  • references/workflows.md
  • scripts/agent.py
  • scripts/process.py

Open the folder on GitHubat commit 54a7988

Compare with similar skills

Implementing Next Generation Firewall With Palo Alto next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Implementing Next Generation Firewall With Palo Alto compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Implementing Next Generation Firewall With Palo Alto this skillmukul975/Anthropic-Cybersecurity-Skills34k—~3.1kAutomated safety check: PassApache-2.0
mTLS Configurationwshobson/agents40k9 repos~588Automated safety check: PassMIT
Implementing Tlsancoleman/ai-design-components525—~3.6kAutomated safety check: NotesMIT
External Enumerationforefy/.context152—~3.1kAutomated safety check: PassMIT
Iam Helper For Policy Managementgoogle/skills21k—~1.4kAutomated safety check: PassApache-2.0
401 403 Bypass Techniquesuphiago/recon-skills1.3k—~3.1kAutomated safety check: PassMIT

Similar skills

  • mTLS Configuration

    wshobson/agents

    Walks through mutual TLS between services in a zero-trust setup: certificate hierarchy, rotation, a gradual PERMISSIVE-to-STRICT rollout and handshake debugging.

    40k GitHub starsUsed in 9 repos~588 tokens
    SecurityAuto-check passed

  • Implementing Tls

    ancoleman/ai-design-components

    Configure TLS certificates and encryption for secure communications.

    525 GitHub stars~3.6k tokensUpdated 10 mo ago
    SecurityAuto-check: notes

  • External Enumeration

    forefy/.context

    Passively map a company's domains, subdomains, DNS ownership, tech stack, and CDNs.

    152 GitHub stars~3.1k tokensUpdated 6 days ago
    SecurityAuto-check passed

  • Iam Helper For Policy Management

    google/skills

    Official

    Streamlines the creation, modification, and management of IAM allow policies (v1) and deny policies (v2).

    21k GitHub stars~1.4k tokensUpdated yesterday
    SecurityAuto-check passed

  • 401 403 Bypass Techniques

    uphiago/recon-skills

    A skill your agent uses when protected HTTP routes return 401 or 403.

    1.3k GitHub stars~3.1k tokensUpdated 1 mo ago
    SecurityAuto-check passed

  • Origin Ip Discovery

    uphiago/recon-skills

    Discover origin IPs behind CDN/WAF via favicon hash, DNS history, and SSL certs.

    1.3k GitHub stars~1.7k tokensUpdated 1 mo ago
    SecurityAuto-check passed

More from mukul975/Anthropic-Cybersecurity-Skills

All 644 skills in this repo

  • Campaign Attribution Evidence Analysis

    mukul975/Anthropic-Cybersecurity-Skills

    Weighs infrastructure, TTP, malware code and timing evidence with the Diamond Model and competing hypotheses to reach a confidence-rated attribution.

    34k GitHub stars~2.3k tokensUpdated 1 mo ago
    Auto-check passed

  • Go Malware Analysis in Ghidra

    mukul975/Anthropic-Cybersecurity-Skills

    Walks through reverse engineering Go-compiled malware in Ghidra: parsing buildinfo and pclntab, recovering stripped function names and extracting dependencies.

    34k GitHub stars~2.8k tokensUpdated 1 mo ago
    Auto-check passed

  • LNK and Jump List Forensics

    mukul975/Anthropic-Cybersecurity-Skills

    Guides forensic analysis of Windows LNK shortcut files and Jump Lists with LECmd, JLECmd and manual parsing to show file access and program execution.

    34k GitHub stars~2.8k tokensUpdated 1 mo ago
    Auto-check passed

  • Malware Persistence Analysis with Autoruns

    mukul975/Anthropic-Cybersecurity-Skills

    Hunts Windows malware persistence with Sysinternals Autoruns, covering run keys, services, scheduled tasks and drivers, with baseline comparison.

    34k GitHub stars~1.2k tokensUpdated 1 mo ago
    Auto-check passed

  • NTFS MFT Deleted File Recovery

    mukul975/Anthropic-Cybersecurity-Skills

    Guides a Windows forensic examination of the NTFS Master File Table to recover deleted-file evidence, build timelines and spot timestomping.

    34k GitHub stars~2.7k tokensUpdated 1 mo ago
    Auto-check passed

  • Network Covert Channel Analysis

    mukul975/Anthropic-Cybersecurity-Skills

    Detects DNS tunneling, ICMP exfiltration and HTTP-based covert channels in packet captures and DNS logs when hunting for hidden command-and-control traffic.

    34k GitHub stars~2k tokensUpdated 1 mo ago
    Auto-check passed

Categories

Questions about Implementing Next Generation Firewall With Palo Alto

What does Implementing Next Generation Firewall With Palo Alto do?

Configures and deploys Palo Alto Networks next-generation firewalls end-to-end, covering App-ID application-aware policies, User-ID identity-based enforcement, zone-based security rules, SSL…. Implementing Next Generation Firewall With Palo Alto is an agent skill from mukul975/Anthropic-Cybersecurity-Skills. Configures and deploys Palo Alto Networks next-generation firewalls end-to-end, covering App-ID application-aware policies, User-ID identity-based enforcement, zone-based security rules, SSL decryption for encrypted traffic visibility, and Content-ID threat prevention profiles.

When should I use Implementing Next Generation Firewall With Palo Alto?

Implementing Next Generation Firewall With Palo Alto fits situations like: moving an enterprise from port-based firewall rules to application- and identity-aware NGFW policy on Palo Alto hardware; tasks that involve Cloud networking.

How do I install Implementing Next Generation Firewall With Palo Alto in Claude Code?

Run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-next-generation-firewall-with-palo-alto -a claude-code`. Or copy the skill folder (skills/implementing-next-generation-firewall-with-palo-alto in mukul975/Anthropic-Cybersecurity-Skills) into .claude/skills/implementing-next-generation-firewall-with-palo-alto in your project. Claude Code loads it when a task matches its description.

How do I install Implementing Next Generation Firewall With Palo Alto in Codex?

Run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-next-generation-firewall-with-palo-alto -a codex`. Or copy the skill folder (skills/implementing-next-generation-firewall-with-palo-alto in mukul975/Anthropic-Cybersecurity-Skills) into .agents/skills/implementing-next-generation-firewall-with-palo-alto in your project. Codex loads it when a task matches its description.

Can I use Implementing Next Generation Firewall With Palo Alto in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-next-generation-firewall-with-palo-alto -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/implementing-next-generation-firewall-with-palo-alto, .gemini/skills/implementing-next-generation-firewall-with-palo-alto, .github/skills/implementing-next-generation-firewall-with-palo-alto and .opencode/skills/implementing-next-generation-firewall-with-palo-alto in your project.

What does Implementing Next Generation Firewall With Palo Alto need to run?

Going by SKILL.md and its folder, Implementing Next Generation Firewall With Palo Alto needs Python for the scripts in its folder. Our summary lists: Python 3.

Does Implementing Next Generation Firewall With Palo Alto access the network?

SKILL.md names 3 domains. As links in the text: docs.paloaltonetworks.com, paloaltonetworks.com and csrc.nist.gov. This is read from the text; nothing was executed.

Is Implementing Next Generation Firewall With Palo Alto safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Implementing Next Generation Firewall With Palo Alto use?

Implementing Next Generation Firewall With Palo Alto is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Implementing Next Generation Firewall With Palo Alto use?

About 3.1k tokens (SKILL.md is roughly 13k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 1.2k tokens, read only when the agent opens those files.

What are the alternatives to Implementing Next Generation Firewall With Palo Alto?

Skills that share tags, products or a category with Implementing Next Generation Firewall With Palo Alto: mTLS Configuration (wshobson/agents, 40k stars), Implementing Tls (ancoleman/ai-design-components, 525 stars), External Enumeration (forefy/.context, 152 stars) and Iam Helper For Policy Management (google/skills, 21k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Implementing Next Generation Firewall With Palo Alto?

mukul975 (a GitHub user) maintains it in mukul975/Anthropic-Cybersecurity-Skills, which has 34,116 GitHub stars. The repository holds 644 skills in this directory. The repository was last updated on August 31, 2026.

Source: mukul975/Anthropic-Cybersecurity-Skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.