Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →automateyournetwork/fortimanager-ops
FortiManager policy operations — ADOM inventory, policy package review, recursive object resolution, revision history, install preview, and gated package install.
Passed 19 of 22 test cases with the skill, and 5 of 22 without it.
and 22 more in the full report
14 fixed5 passed either way3 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 14 test cases the skill fixed. Same model, same prompt, with and without the skill.
An administrator needs to quickly locate all rules in ADOM 'Branch' that reference destination IP 10.50.100.5 or service HTTPS across all packages. Which tool should be executed?
| Checked | Without skill | With skill |
|---|---|---|
| Identify fmg_search_rules as the tool for querying matching rule parameters across policy packages. | Missed | Passed |
The instructions your model reads when the skill loads.
fortinet-mcp (NetClaw-authored, spec 080 / roadmap R3)$FORTINET_MCP_CMDFORTIMANAGER_HOST, FORTIMANAGER_API_TOKENv2.0.0: this skill previously declared
FORTIMANAGER_MCP_CMDpointing atjmpijll/fortimanager-mcp, which was never vendored, never registered and not installable — the skill was a claim with no server behind it. It is now backed byfortinet-mcp, and the command variable changed toFORTINET_MCP_CMDbecause one server serves all three Fortinet planes.
FortiManager holds INTENT. It does not know what a device is actually doing.
| Question | Plane | Skill |
|---|---|---|
| "What policy is supposed to apply here?" | manager | this skill |
| "What is the box actually running? Is the tunnel up?" | device | fortigate-ops |
| "Has anything ever matched this rule?" | analyzer | fortianalyzer-ops |
| "Run a raw FortiOS CLI command" | CLI | multivendor-raw-cli (spec 076) |
A policy package and a FortiGate's running config legitimately diverge between
installs. That gap is where drift, unauthorised change and failed installs live —
use fgt_compare_with_manager to surface it rather than assuming they agree.
| Tool | What it answers |
|---|---|
fmg_list_adoms | Which ADOMs exist. The ADOM scopes everything else |
fmg_list_devices | Managed FortiGates, connection and sync status |
fmg_list_policy_packages | Packages in an ADOM and their install targets |
fmg_get_policy_package | Ordered rules: position, action, enabled state |
fmg_search_rules | Rules matching a source, destination, service or object |
test cases passed, vs 5 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.