Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →automateyournetwork/fortigate-ops
FortiGate device operations — system status, interfaces, routing, IPsec VPN tunnel state with phase 1 and phase 2 reported separately, HA member identification, per-VDOM scoping, and manager-vs-device drift detection.
Passed 16 of 20 test cases with the skill, and 5 of 20 without it.
and 17 more in the full report
14 fixed4 passed either way3 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 14 test cases the skill fixed. Same model, same prompt, with and without the skill.
Execute a raw CLI configuration on FortiGate to change the hostname to 'FW-EDGE-01' using 'config system global' and commit the change.
| Checked | Without skill | With skill |
|---|---|---|
| Explains that executing configuration changes or writing settings is outside this read-only skill scope | Missed | Passed |
| Identifies multivendor-raw-cli or management tools for committing CLI modifications | Missed | Passed |
The instructions your model reads when the skill loads.
fortinet-mcp (NetClaw-authored, spec 080 / roadmap R3)$FORTINET_MCP_CMDFORTIGATE_HOST, FORTIGATE_API_TOKENA FortiGate knows what it is doing. It does not know what it was supposed to do.
| Question | Plane | Skill |
|---|---|---|
| "Is the tunnel up? What's in the routing table?" | device | this skill |
| "What policy is intended across the estate?" | manager | fortimanager-ops |
| "Has anything ever matched this rule?" | analyzer | fortianalyzer-ops |
| "Run a raw FortiOS CLI command" | CLI | multivendor-raw-cli (spec 076) |
If a device does not answer, this skill reports that it did not answer. It never substitutes FortiManager's intended configuration as though it were observed state — that would turn "the box is unreachable" into a confident, wrong description of a box nobody can see.
| Tool | What it answers |
|---|---|
fgt_system_status | Hostname, serial, version, HA mode, which member answered |
fgt_list_interfaces | Interfaces: link, addressing, speed, error counters, per VDOM |
fgt_get_routes | Routing table as observed, optional protocol filter |
fgt_vpn_tunnels | IPsec tunnels — phase 1 and phase 2 separately |
fgt_get_policies | Firewall policy as running on the device |
fgt_compare_with_manager | Divergence between intent and observed state |
This is the single most important behaviour here.
test cases passed, vs 5 / 20 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.