Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →automateyournetwork/batfish-config-analysis
Batfish network configuration analysis -- pre-deployment validation, reachability testing, ACL/firewall tracing, differential analysis, compliance checking.
Passed 16 of 18 test cases with the skill, and 4 of 18 without it.
and 18 more in the full report
14 fixed5 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 13 test cases the skill fixed. Same model, same prompt, with and without the skill.
We need to test whether DNS query packets over UDP port 53 sent from client `10.1.10.50` can reach internal DNS server `10.2.10.53` in snapshot `snapshot-v3`. What tool call and parameters are needed?
| Checked | Without skill | With skill |
|---|---|---|
| Recommends executing batfish_test_reachability | Missed | Passed |
| Sets protocol to UDP, dst_port to 53, src_ip to 10.1.10.50, and dst_ip to 10.2.10.53 | Passed | Passed |
The instructions your model reads when the skill loads.
python3 -u mcp-servers/batfish-mcp/batfish_mcp_server.py (stdio transport)BATFISH_HOST and BATFISH_PORT environment variablespybatfish, mcp[cli], python-dotenv| Tool | Parameters | What It Does |
|---|---|---|
batfish_upload_snapshot | snapshot_name, configs/config_path, network | Upload device configs to Batfish and create a named snapshot |
batfish_validate_config | snapshot_name, network | Validate configs with per-device pass/fail status, vendor detection, warnings |
batfish_test_reachability | snapshot_name, src_ip, dst_ip, protocol, dst_port | Test if traffic can flow between two endpoints with full path trace |
batfish_trace_acl | snapshot_name, device, filter_name, src_ip, dst_ip, protocol, dst_port | Trace a packet through ACL rules to find matching permit/deny rule |
batfish_diff_configs | reference_snapshot, candidate_snapshot, include_routes, include_reachability | Compare two snapshots for route and reachability differences |
batfish_check_compliance | snapshot_name, policy_type | Check configs against compliance policies (6 built-in policy types) |
batfish_list_snapshots | network | List all available snapshots |
batfish_delete_snapshot | snapshot_name, network | Delete a snapshot |
When a user wants to validate configurations before deployment:
batfish_upload_snapshot with inline configs dict or path to config directorybatfish_validate_config to check parse status, vendor detection, warnings/errorsbatfish_test_reachability for critical traffic pathsbatfish_check_compliance against organizational policies# Upload proposed configs
batfish_upload_snapshot snapshot_name="pre-change-site-a" config_path="/path/to/configs/"
test cases passed, vs 4 / 18 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.