network-config-validation
Pre-deployment checks for router and switch configuration, including dangerous commands, duplicate addresses, subnet overlaps, stale references, management-plane risk, and IOS-style security hygiene. Use when reviewing a router or switch configuration before deployment.
- Kind
- Skill
- Works with
- Claude Code, Codex
- Languages
- Swift
- Source
- affaan-m/ECC @ d3b8a3e90890
- Path
- skills/network-config-validation/SKILL.md
- License
- MIT
- Jobs
- Review, Guardrails
InstallCopy it from the source repository, or sign in and let the assistant adapt it for your project.
# Network Config Validation Use this skill to review network configuration before a change window or before an automation run touches production devices. ## When to Use - Reviewing Cisco IOS or IOS-XE style snippets before deployment. - Auditing generated config from scripts or templates. - Looking for dangerous commands, duplicate IP addresses, or subnet overlaps. - Checking whether ACLs, route-maps, prefix-lists, or line policies are referenced but not defined. - Building lightweight pre-flight scripts for network automation. ## How It Works Treat config validation as layered evidence, not as a complete parser. Regex checks are useful for pre-flight warnings, but final approval still needs a network engineer to review intent, platform syntax, and rollback steps. Validate in this order: 1. Destructive commands. 2. Credential and management-plane exposure. 3. Duplicate addresses and overlapping subnets. 4. Stale references to ACLs, route-maps, prefix-lists, and interfaces. 5. Operational hygiene such as NTP, timestamps, remote logging, and banners. ## Dangerous Command Detection ```python import re DANGEROUS_PATTERNS: list[tuple[re.Pattern[str], str]] = [ …