A comprehensive network audit skill for reconciling IPAM records with live network state and DNS consistency.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install ipam-dns-audit
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install ipam-dns-audit using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is IPAM/DNS Reconciliation Audit?
The IPAM/DNS Reconciliation Audit is a professional-grade methodology designed to bridge the gap between your authoritative IP Address Management (IPAM) records and the ground truth of your network. By comparing intended states—such as prefix hierarchies and static reservations—against live ARP tables, DHCP leases, and DNS resolution results, this skill ensures network reliability and security.
Operating within Openclaw Skills, this tool provides a platform-agnostic framework compatible with major providers like NetBox, Infoblox, and BlueCat. It systematically identifies orphaned records, IP conflicts, and subnet exhaustion risks, allowing network engineers to maintain a pristine source of truth while optimizing address space utilization.
IPAM/DNS Reconciliation Audit Use Cases
- Investigating subnet exhaustion when IPAM shows prefixes nearing total capacity.
- Validating forward and reverse DNS consistency to prevent application resolution failures.
- Diagnosing intermittent connectivity issues caused by duplicate IP assignments or ARP conflicts.
- Performing pre-migration audits before data center moves or significant re-addressing projects.
- Conducting compliance audits to demonstrate IP address accountability for regulatory governance.
How IPAM/DNS Reconciliation Audit Works
- Extract authoritative allocation data from IPAM platforms to analyze prefix hierarchies and VLAN mappings.
- Collect live network data through ARP table analysis on Layer 3 gateways and DHCP lease correlation.
- Perform a deep DNS audit to verify forward/reverse record consistency and detect stale A/PTR entries.
- Execute bitwise comparison and cross-referencing to identify overlapping subnets or duplicate IP assignments.
- Calculate real-world utilization metrics to classify subnets into health tiers (Good, Warning, Critical).
- Generate a structured reconciliation report featuring health scores and prioritized remediation actions.
IPAM/DNS Reconciliation Audit Setup
To use this skill within the Openclaw Skills ecosystem, ensure you have the necessary environment access:
# Example: Verify network connectivity to your IPAM API
curl -H "Authorization: Token <your_token>" https://netbox.example.com/api/ipam/prefixes/
# Ensure DNS tools like dig or nslookup are available in your CLI
dig -v
# If using nmap for live discovery sweeps
sudo nmap -sn 192.168.1.0/24
Prerequisites:
- Read-only API access to your IPAM (NetBox, Infoblox, etc.).
- Direct query access to authoritative DNS servers.
- SNMP or SSH access to network devices for ARP table extraction.
IPAM/DNS Reconciliation Audit Data Schema & Taxonomy
The skill organizes findings into a structured taxonomy for clear remediation:
| Data Category | Description | Primary Metadata |
|---|---|---|
| Prefix Hierarchy | Supernet/Subnet containment | VRF, CIDR, Parent/Child status |
| IP Assignments | Live vs Record state | MAC Address, Status (Static/DHCP), Age |
| DNS Records | Resolution mappings | A, PTR, CNAME, TTL, SOA Serial |
| Health Metrics | Capacity thresholds | Utilization %, Free Lease Count, Match Rate |
IPAM/DNS Reconciliation Audit Advanced Features
- Multi-VRF Support: Perform bitwise overlap detection across isolated routing instances.
- DHCP Scope Projection: Predict time-to-exhaustion based on lease growth rates.
- CNAME Chain Validation: Automatically detect and flag fragile multi-hop DNS aliases.
- IPv6 Dual-Stack Coverage: Track GUA/ULA adoption and identify IPv4-only migration gaps.
- Automated Health Scoring: Generate composite scores based on prefix integrity and record hygiene.
SKILL.md
Loading
Related Openclaw Skills
US Stock Financials
A powerful financial data extraction tool that pulls comprehensive XBRL data from SEC EDGAR to generate detailed reports and PDF exports.
Market Breadth Analyzer
A powerful data analysis tool that quantifies stock market health by calculating a 0-100 composite score based on six critical breadth components.
Feishu Bitable Architect
A professional business architecture consultant that translates complex workflows into structured, scalable Feishu Bitable solutions.
Typesense Search
A lightning-fast search engine integration that enables AI agents to manage collections, documents, and cluster health through secure automated workflows.
Meta Debugger
Meta Debugger is an AI-powered self-healing system that automatically identifies, analyzes, and repairs runtime errors to create resilient autonomous agents.
gstack-agent
A comprehensive software factory suite featuring over 20 specialized AI agents that handle the entire development lifecycle from product ideation to post-deployment monitoring.
Featured*
