agentsclimarketplace

Cisco security audit

Skill bradmccloskey/claude-cisco-skills/cisco-security-audit

Nine Claude Code skills for Cisco network automation: backup, config gen, discovery, QoS testing, security audit.

Install
npx -y skills add bradmccloskey/claude-cisco-skills --skill cisco-security-audit

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

  • 16 days oldThe repository was created 16 days ago. New is not bad, but a brand new repository carrying a familiar-sounding name is the shape a typosquat arrives in, and there has been no time for anyone else to find a problem with it.
  • 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Generate Python scripts that audit Cisco device security posture. Use when the user wants to check security hardening, compliance, ACL review, or vulnerability assessment of Cisco devices.

SKILL.md

2.6 KB, 540 tokens by cl100k_base, as published. Nobody here has run it

Cisco Security Audit Scripts

Write Python scripts that audit and validate Cisco device security. Follow these standards:

Audit Categories

Device Hardening (CIS Benchmark / STIG aligned)

  • Check for service password-encryption
  • Verify enable secret (not enable password)
  • Ensure no ip http server (or HTTPS only with ACL)
  • Check login block-for and login delay settings
  • Verify unused interfaces are shut down and in a blackhole VLAN
  • Check banner motd / login presence
  • Verify no cdp run on external interfaces
  • Check no ip source-route, no ip directed-broadcast
  • Verify VTY line ACLs and transport input ssh
  • Ensure ip ssh version 2 and no Telnet

AAA & Access Control

  • Verify AAA new-model configuration
  • Check TACACS+/RADIUS server configuration
  • Validate local fallback account exists
  • Review privilege levels and role-based access
  • Check console and AUX line security

Routing Security

  • Verify routing protocol authentication (OSPF MD5/SHA, BGP MD5, EIGRP)
  • Check for route filtering on external peers
  • Validate uRPF (unicast reverse path forwarding)
  • Check for no ip proxy-arp on appropriate interfaces

ACL Review

  • Parse and analyze all ACLs
  • Flag overly permissive rules (permit ip any any)
  • Identify shadowed rules (unreachable ACEs)
  • Check ACL application to interfaces (in/out)
  • Verify management ACLs on VTY lines

ASA / Firewall Specific

  • Validate security levels on interfaces
  • Check NAT rules for exposure
  • Review access-group assignments
  • Verify failover configuration
  • Check for any-to-any rules

Output Requirements

  • Compliance score (percentage of checks passed)
  • Categorized findings: CRITICAL / HIGH / MEDIUM / LOW / INFO
  • Each finding includes: description, current config, expected config, remediation command
  • CSV/JSON export for reporting
  • Support for baseline comparison over time

Libraries to Use

  • netmiko for config collection
  • ciscoconfparse or ttp for config parsing
  • re for regex-based checks
  • rich for formatted audit reports
  • jinja2 for HTML report generation (optional)

Security Requirements for the Script Itself

  • NEVER hardcode credentials
  • Use environment variables or secure vault
  • Log audit actions (who ran what, when)
  • Do not modify any device configuration (read-only audit)

What ships with it

Read from the repository

Just SKILL.md. No reference files, no scripts.

Keep looking

Skills are one crate of 327,069. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.