From fastly-agent-toolkit
Audits Fastly Next-Gen WAF (NGWAF) workspaces to verify critical templated rules for login protection (LOGINDISCOVERY, LOGINATTEMPT, etc.), credit card validation (CC-VAL-...), and gift card validation are configured and enabled. Use for security posture audits.
npx claudepluginhub fastly/fastly-agent-toolkit --plugin fastly-agent-toolkitThis skill uses the workspace's default tool permissions.
This skill is designed to be triggered when performing an internal audit of Fastly Next-Gen WAF (NGWAF) workspaces. It is particularly useful for security teams, DevOps engineers, or anyone responsible for managing NGWAF configurations who wants to ensure that critical templated protection rules are properly configured and enabled. The fastly-cli skill should be used to configure rules while th...
Deploys and tunes WAF rules on AWS WAF, Azure WAF, and Cloudflare to protect cloud apps against OWASP Top 10, with managed/custom rules, rate limiting, bot management, and false positive reduction via logging. Use for API security, brute force defense, and compliance.
Generates WAF rules, configurations, and validation for web application firewalls. Useful for security tasks like rule creation, best practices, and threat modeling.
Deploys and tunes WAF rules on AWS, Azure, and Cloudflare to protect cloud apps from OWASP Top 10 attacks using managed/custom rules, rate limiting, bot management, and false positive reduction via logging.
Share bugs, ideas, or general feedback.
This skill is designed to be triggered when performing an internal audit of Fastly Next-Gen WAF (NGWAF) workspaces. It is particularly useful for security teams, DevOps engineers, or anyone responsible for managing NGWAF configurations who wants to ensure that critical templated protection rules are properly configured and enabled. The fastly-cli skill should be used to configure rules while this skill is used to identify any gaps in rule configuration or enablement, especially for login protection, credit card validation, and gift card validation rules.
This skill audits Fastly NGWAF workspaces to understand the status of critical templated rules related to:
LOGINDISCOVERY, LOGINATTEMPT, LOGINSUCCESS, and LOGINFAILURE.CC-VAL-ATTEMPT, CC-VAL-FAILURE, and CC-VAL-SUCCESS.GC-VAL-ATTEMPT, GC-VAL-FAILURE, and GC-VAL-SUCCESS.Assume that the user has correctly configured their FASTLY_API_KEY environment variable. Run the assessment script provided in the skill:
# Execute the assessment script
./scripts/assess_ngwaf_rules.sh