# PanOS agent skills for Claude Code, Cursor and RevampKey

> Ready-made PanOS playbooks for AI agents: check a PAN-OS firewall's health with AI, reconcile PAN-OS routing and zones, change a PAN-OS static route safely. Free SKILL.md files for Claude Code, Cursor and Codex, or one click in RevampKey.

## Skills

- [Use the PanOS MCP connector safely](https://revampkey.com/marketplace/panos-mcp/skills/essentials.md): Teaches the agent how to work with a PAN-OS firewall through the PanOS MCP connector: confirm the device, pick the right read tool, keep reads small, and ask before any static route change.
- [Check a PAN-OS firewall's health with AI](https://revampkey.com/marketplace/panos-mcp/skills/firewall-health-check.md): Triages one PAN-OS firewall's HA state, resources, interfaces and session load, then gives a healthy, degraded or escalate verdict. It stays read-only and asks before any change.
- [Reconcile PAN-OS routing and zones](https://revampkey.com/marketplace/panos-mcp/skills/routing-and-zone-reconciliation.md): Checks the routing table, static routes, interfaces, zones and VLANs of one PAN-OS firewall against each other to find dead routes, unrouted subnets and zone mismatches. It reads state only and asks before changing anything.
- [Change a PAN-OS static route safely](https://revampkey.com/marketplace/panos-mcp/skills/static-route-change.md): Plans and applies one static route add or removal on a PAN-OS firewall, checking the routing table and next-hop reachability first. It shows the plan and waits for your explicit yes before writing anything.

## Install

- RevampKey: connect PanOS at https://revampkey.com/marketplace/panos-mcp; the skills come with it.
- Any Agent Skills tool, into the current project:

```bash
for s in essentials firewall-health-check routing-and-zone-reconciliation static-route-change; do
  curl -fsSL --create-dirs -o .agents/skills/panos-mcp-$s/SKILL.md https://revampkey.com/marketplace/panos-mcp/skills/$s/SKILL.md
done
```

### What is a PanOS agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each PanOS skill describes one job, which PanOS tools to use in which order, what to check first and when to stop and ask you.

### Do the PanOS skills change anything on their own?

2 of the 4 only read. The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in PanOS.

### Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect PanOS; elsewhere you copy the folders into your project or skills directory.

### Do I need the PanOS MCP server too?

Yes. The skills tell the agent how to do the work; the PanOS MCP server gives it the tools to do it. The PanOS MCP setup guide covers every client.

MCP setup guide: https://revampkey.com/marketplace/panos-mcp.md