A specialized security analysis tool for auditing Azure Network Security Groups and Firewall policies to eliminate dangerous internet exposure.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install nsg-firewall-auditor
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install nsg-firewall-auditor using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Azure NSG & Firewall Auditor?
The Azure NSG & Firewall Auditor is a dedicated security analysis skill designed for cloud engineers and security professionals. Leveraging the power of Openclaw Skills, this tool examines network configurations to identify high-risk misconfigurations that expose virtual machines to the public internet. Instead of requiring direct access to your Azure environment, it operates on a privacy-first model where you provide the exported JSON data from your network security groups and firewall policies.
This skill acts as an automated security architect, providing immediate feedback on ports, protocols, and source IPs that could lead to unauthorized access. By analyzing rules against modern security benchmarks, it helps teams enforce zero-trust networking and ensure compliance with security best practices across their entire Azure cloud footprint. It is an essential asset for anyone using Openclaw Skills to maintain a robust and secure cloud posture.
Azure NSG & Firewall Auditor Use Cases
- Identifying RDP or SSH ports exposed to the public internet (0.0.0.0/0).
- Auditing internal subnet traffic for overly permissive lateral movement rules.
- Generating tightened, production-ready NSG rules in JSON format for immediate remediation.
- Reviewing Azure Firewall policies for dangerous rules that bypass standard security protocols.
- Preparing for security audits by documenting the blast radius and risk levels of existing network rules.
How Azure NSG & Firewall Auditor Works
- Export your Azure networking data using standard Azure CLI commands for NSG rules or Firewall policies.
- Provide the exported JSON data or a description of your VNet topology to the Openclaw Skills agent.
- The skill analyzes the input against a comprehensive library of security checks, including management ports and database access vulnerabilities.
- It generates a detailed report categorizing critical findings and estimating the potential blast radius of identified vulnerabilities.
- The agent provides actionable remediation steps, including corrected JSON rule sets and Azure Policy recommendations to prevent future misconfigurations.
Azure NSG & Firewall Auditor Setup
To use this feature within Openclaw Skills, you first need to export your NSG configuration data using the Azure CLI. Run the following commands to gather the necessary data:
# Export all NSG rules in your subscription
az network nsg list --output json > nsg-list.json
# Get effective rules for a specific network interface to see actual application
az network nic list-effective-nsg --ids /subscriptions/{sub-id}/resourceGroups/{rg}/providers/Microsoft.Network/networkInterfaces/{nic-name} --output json
Once you have the JSON output, simply provide the file content or the raw JSON text to the agent for a full security audit.
Azure NSG & Firewall Auditor Data Schema & Taxonomy
The skill processes structured JSON data typically returned by the Azure Resource Manager (ARM). The analysis focuses on the following data taxonomy:
| Component | Data Source | Key Metadata Tracked |
|---|---|---|
| Network Security Group | az network nsg show |
rules, sourceAddressPrefix, destinationPortRange, priority |
| Effective Rules | az network nic list-effective-nsg |
effectiveSecurityRules, access, sourcePortRange |
| Firewall Policy | az network firewall policy list |
ruleCollections, action type, ruleType, priority |
| Subnet Mapping | VNet Topology | Subnet delegation, associated NSGs, and service endpoints |
Azure NSG & Firewall Auditor Advanced Features
- Automatic generation of Azure Bastion migration recommendations to eliminate the need for direct remote access.
- Blast radius assessment for every identified vulnerability to help teams prioritize patching schedules.
- Implementation of Just-In-Time (JIT) VM Access recommendations with ready-to-use CLI commands for implementation.
- Integration with Azure Policy to create automated guardrails that deny overly broad CIDR source ranges globally.
- Legacy rule detection that flags NSG rules created before 2022 to help clean up technical security debt.
SKILL.md
Loading
Related Openclaw Skills
GCP Networking & Egress Cost Optimizer
An expert analytical framework to identify and eliminate unnecessary GCP networking and egress expenses through data-driven insights.
Azure Key Vault & Secrets Security Auditor
A security-focused analysis tool that audits Azure Key Vault configurations, access policies, and secret hygiene to mitigate credential exposure risks.
AWS Idle & Zombie Resource Detector
A professional-grade cloud hygiene tool that scans AWS environments to identify and report on idle or orphaned resources generating unnecessary costs.
AWS IAM Policy Auditor
Automate the detection of over-privileged AWS IAM policies and generate secure, least-privilege replacements to prevent cloud breaches.
Azure Reservations & Hybrid Benefit Advisor
An AI-driven advisor that analyzes Azure usage data to recommend optimal Reservation and Hybrid Benefit stacking for maximum cost savings.
AWS RI and Savings Plans Advisor
An AI-driven financial advisor that analyzes AWS usage data to recommend the most cost-effective Reserved Instance and Savings Plan strategies.
Featured*
