# Zscaler agent skills for Claude Code, Cursor and RevampKey

> Ready-made Zscaler playbooks for AI agents: review ZIA DLP and URL category coverage, plan ZIA locations, IP groups and GRE tunnels with AI, audit ZIA rules with the Zscaler MCP Server. Free SKILL.md files for Claude Code, Cursor and Codex, or one click in RevampKey.

## Skills

- [Use the Zscaler MCP Server safely](https://revampkey.com/marketplace/zscaler-mcp-server/skills/essentials.md): Guides an agent through the Zscaler MCP Server: confirming the tenant, respecting read-only defaults and the write allowlist, and asking for explicit approval before any change to live configuration.
- [Review ZIA DLP and URL category coverage](https://revampkey.com/marketplace/zscaler-mcp-server/skills/zia-dlp-and-url-category-review.md): Checks ZIA DLP dictionaries, engines, URL categories and ATP malicious URL lists for gaps, dead entries and conflicts, then drafts changes for your approval rather than applying them.
- [Plan ZIA locations, IP groups and GRE tunnels with AI](https://revampkey.com/marketplace/zscaler-mcp-server/skills/zia-location-and-group-setup.md): Plans a ZIA site or rollout: checks existing locations, IP groups, network services and tunnels for overlaps, drafts each object, and creates nothing until you approve the exact list.
- [Audit ZIA rules with the Zscaler MCP Server](https://revampkey.com/marketplace/zscaler-mcp-server/skills/zia-rule-audit.md): Reviews your Zscaler Internet Access firewall, DNS, IPS and cloud app control rules, labels and groups to find shadowed, duplicated or unowned policy. It is read-only and proposes changes without applying them.
- [Reconcile your ZIA user directory](https://revampkey.com/marketplace/zscaler-mcp-server/skills/zia-user-directory-reconciliation.md): Compares ZIA users, departments and groups with your intended directory to find orphaned accounts, empty groups and department mismatches. It reports findings only and asks before changing anything.

## Install

- RevampKey: connect Zscaler at https://revampkey.com/marketplace/zscaler-mcp-server; the skills come with it.
- Any Agent Skills tool, into the current project:

```bash
for s in essentials zia-dlp-and-url-category-review zia-location-and-group-setup zia-rule-audit zia-user-directory-reconciliation; do
  curl -fsSL --create-dirs -o .agents/skills/zscaler-mcp-server-$s/SKILL.md https://revampkey.com/marketplace/zscaler-mcp-server/skills/$s/SKILL.md
done
```

### What is a Zscaler agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each Zscaler skill describes one job, which Zscaler tools to use in which order, what to check first and when to stop and ask you.

### Do the Zscaler skills change anything on their own?

2 of the 5 only read. The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in Zscaler.

### Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect Zscaler; elsewhere you copy the folders into your project or skills directory.

### Do I need the Zscaler MCP server too?

Yes. The skills tell the agent how to do the work; the Zscaler MCP server gives it the tools to do it. The Zscaler MCP setup guide covers every client.

MCP setup guide: https://revampkey.com/marketplace/zscaler-mcp-server.md