damira

Plugin damira from marketplace damira-plugins in ciscoittech/damira-plugins. Commands read from the repo's manifest — 11 days ago.

Skills (17)

• advisory-exposure

  Check a device inventory against published security advisories - which devices are exposed to critical or high CVEs at their exact running versions, through which vendor advisory, and what to patch first. Use when the user asks "are we exposed to...", "which devices are affected by CVE...", gives an

• config-audit

  Security-audit an existing network device configuration — router, switch, firewall, wireless controller — for weak credentials, insecure management access, missing hardening, and best-practice violations. Use whenever the user pastes a device config or points at a .cfg file, whether or not they ask

• document

  Turn an engineer's notes, timeline, chat log or pasted output into a finished operational document - an incident report or post-mortem, or a troubleshooting runbook - in the team's template, with nothing invented. Use when the user asks to write up an incident, turn notes into a post-mortem or RCA,

• generate-automation

  Write Python network automation — Nornir, Netmiko, or Scrapli scripts with a YAML inventory — then validate it locally before handing it back. Use when the user asks for a Python script, Nornir task, Netmiko or Scrapli code to push config, collect show output, back up configs, or audit a fleet of Ci

• generate-config

  Write a deployable configuration for a real network device. Use when the user asks for the config, CLI, or commands to set up a feature on a specific platform — BGP peering, OSPF, VLANs and trunks, ACLs, NAT, VPN, QoS, AAA/TACACS, SNMPv3, NTP — on Cisco IOS/IOS-XE/NX-OS, Arista EOS, Juniper Junos, P

• generate-diagram

  Draw a network topology diagram from the device configs and saved show cdp/lldp neighbors detail output in configs/ — an SVG, a self-contained HTML preview, Mermaid and D2, and optionally an editable PowerPoint slide. Use when the user asks to draw, map, diagram or visualise the topology, the networ

• generate-lab

  Build a runnable ContainerLab topology with startup configs for testing or practice. Use when the user asks to lab up, simulate, reproduce, or practice a scenario — BGP convergence, OSPF multi-area, MPLS L3VPN, EVPN-VXLAN, leaf-spine — using containerised nodes (Arista cEOS, Juniper cRPD, Nokia SR L

• generate-pipeline

  Write a CI/CD pipeline for network automation — GitHub Actions or GitLab CI with lint (damira validate), syntax, check-mode or plan, a manual approval gate, then deploy — and validate it locally. Use when the user asks for a pipeline, CI, GitOps, GitHub Actions workflow, or .gitlab-ci.yml around Ans

• generate-playbook

  Write an Ansible playbook, inventory, and group_vars for a repeatable change across many network devices, then validate it locally before handing it back. Use when the user asks for Ansible by name, or asks how to push the same change to a fleet — VLANs, banners, NTP/AAA, SNMPv3, config backup, comp

• generate-terraform

  Write Terraform for network infrastructure — NetBox, Palo Alto PAN-OS, FortiOS, Cisco Meraki, Cisco IOS-XE and NX-OS providers — then validate it locally and end with terraform plan. Use when the user asks for Terraform, HCL, or infrastructure-as-code for firewall rules and objects, NetBox IPAM/DCIM

• generate-tests

  Write network tests — pyATS/Genie learn, change, learn, diff jobs that prove a change did what it should and nothing else, and pytest tests for automation scripts — then validate them locally. Use when the user asks for pyATS, Genie, AEtest, a testbed file, pre/post change verification, state snapsh

• generate-workbook

  Build an Excel workbook (.xlsx) for a network procedure — a migration, platform migration, security audit, change control, or incident-response workbook — grounded in Damira evidence, with an HTML preview. Use when the user asks for a spreadsheet, workbook, tracker, or Excel version of a migration p

• init

  Set up the current folder as a Damira network-operations workspace — configs/, documents/ and notes/ folders, plus project instructions describing the engineer's network. Run once per project; re-running updates the answers.

• lab-test-change

  Test a network change in a throwaway ContainerLab lab before it goes near production — deploy the lab, apply the playbook or script, run show-command or pyATS/Genie checks, report pass/fail, and always destroy the lab. Use when the user says "test this in a lab first", "prove this change before the

• source-of-truth-change

  Turn intended state in the engineer's source of truth (NetBox or Nautobot) into a validated change, then hand it to the automation they already run — an Ansible Automation Platform job in check mode, a pyATS/Genie before-and-after diff, or a Terraform plan. Use when the user asks to make a change "f

• troubleshoot

  Ask Damira to diagnose an active, in-progress network fault. Use when the user reports something broken right now — an outage, a flapping interface, a BGP or OSPF adjacency down, dropped or blackholed traffic, failed calls, users unable to connect — or pastes show/log output for analysis. Also fires

• upgrade-plan

  Ask Damira to assess a version-to-version upgrade of a network platform and produce the MOP and change control. Use when the user names a product and a target release — "IOS-XE 17.6.5 to 17.9.5", "CUCM 12.5 SU7 to 15", "PAN-OS 10.2 to 11.1" — or asks what breaks, what the risk is, or how long a main

Subagents (3)

• damira-fixer

  Mechanical validate-and-fix loop for generated Ansible, Terraform, Python, pyATS, CI pipeline, Jinja and config files. Runs `damira validate`, fixes only what the findings name, re-runs, and stops after 3 rounds. It does not redesign the change or look up vendor syntax. Use from the generate-* skill

• damira-renderer

  Mechanical render step for Damira deliverables. Give it a finished spec (workbook.json, golden-config vars) and the saved evidence folder; it writes the file, runs the Damira renderer, and reports the grounding line. It does not gather evidence or design the change. Use from generate-workbook, upgra

• damira-reviewer

  Fresh-context review of an upgrade MOP (and change request, if one exists) before the engineer sees it. Reads the change folder only, judges what code cannot - can each step be executed as written, does it match the method and node order, are the rollback triggers measurable - and returns findings.

MCP servers (1)

• damira

  runs: python3 ${CLAUDE_PLUGIN_ROOT}/mcp/server.py

Hooks (7)

• UserPromptSubmit

  python3 "${CLAUDE_PLUGIN_ROOT}"/hooks-handlers/prompt_hint.py

• SessionStart

  python3 "${CLAUDE_PLUGIN_ROOT}"/hooks-handlers/session_start.py

• PreToolUse

  python3 "${CLAUDE_PLUGIN_ROOT}"/hooks-handlers/device_gate.py

• PreToolUse

  python3 "${CLAUDE_PLUGIN_ROOT}"/hooks-handlers/document_gate.py

• PreToolUse

  python3 "${CLAUDE_PLUGIN_ROOT}"/hooks-handlers/publish_gate.py

• PostToolUse

  python3 "${CLAUDE_PLUGIN_ROOT}"/hooks-handlers/post_write_validate.py

• Stop

  python3 "${CLAUDE_PLUGIN_ROOT}"/hooks-handlers/task_stop_gate.py

Similar plugins