# Oci Zpr Visibility

> >-

- **Type:** Skill
- **Install:** `agentstack add skill-adibirzu-oci-skills-oci-zpr-visibility`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [adibirzu](https://agentstack.voostack.com/s/adibirzu)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [adibirzu](https://github.com/adibirzu)
- **Source:** https://github.com/adibirzu/oci-skills/tree/main/skills/oci-zpr-visibility

## Install

```sh
agentstack add skill-adibirzu-oci-skills-oci-zpr-visibility
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# OCI ZPR Visibility

Operate a read-first visibility loop for OCI Zero Trust Packet Routing (ZPR):
inventory protected resources and security attributes, correlate VCN Flow Logs,
emit sanitized custom records, and validate Log Analytics dashboards. Keep all
outputs placeholder-safe.

## First move

```bash
./scripts/oci_preflight.sh -c "$COMPARTMENT_OCID"
python3 scripts/kb_lookup.py "" zpr
```

Read [references/zpr-visibility.md](../../references/zpr-visibility.md) before
creating collectors, logs, Service Connector Hub connectors, or dashboards.

## Common multi-step flows

| Task | Sequence |
|---|---|
| Build ZPR visibility | preflight → verify ZPR/security-attribute read permissions → enable VCN Flow Logs for selected resources → create custom log + LA source/dashboard → run collector → validate Logging and LA rows |
| Triage a rejected flow | collect current ZPR inventory → fetch VCN Flow Logs → correlate flow tuple to protected resources/security attributes → classify as expected reject vs `suspected_misconfiguration` |
| Triage an accepted risky flow | correlate flow to ZPR policy/security attributes → classify `unexpected_accepted` as review queue → verify policy intent before any mutation |
| Import dashboard content | validate parser/source/fields → parse every dashboard query → dry-run dashboard import → apply idempotently → confirm dashboard HIT status |

## Safety notes

- ZPR visibility is mostly read/observe. Enabling ZPR enforcement or changing
  policies can break live connectivity; require explicit confirmation.
- Treat `unexpected_accepted` as a review queue, not proof of bypass.
- Treat `suspected_misconfiguration` as a connectivity triage queue, not proof
  that ZPR itself is wrong.
- Never commit security attribute names from a real tenant if they identify
  topology or business domains. Use placeholders.

## Expected output

```text
Finding:      
Evidence:     
Action:       
Verification: 
KB:           
```

## Official documentation

[OCI Documentation](https://docs.oracle.com/en-us/iaas/Content/home.htm) ·
[Logging](https://docs.oracle.com/en-us/iaas/Content/Logging/home.htm) ·
[Log Analytics](https://docs.oracle.com/en-us/iaas/log-analytics/home.htm)

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [adibirzu](https://github.com/adibirzu)
- **Source:** [adibirzu/oci-skills](https://github.com/adibirzu/oci-skills)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-adibirzu-oci-skills-oci-zpr-visibility
- Seller: https://agentstack.voostack.com/s/adibirzu
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.