# Segmentation Validator

> ---

- Skill: `maxwellokumu/segmentation-validator` (Agent Skill, multi-file: 6 files)
- Install (CLI): `npx skillmds@latest add maxwellokumu/segmentation-validator`
- Raw SKILL.md: https://api.skillmd.com/api/skills/maxwellokumu/segmentation-validator/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: maxwellokumu (https://skillmd.com/u/maxwellokumu)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/maxwellokumu/segmentation-validator

---

---
name: segmentation-validator
description: Validate zone isolation and cross-zone traffic controls so Claude can explain where segmentation rules may allow unauthorized or risky network flows.
---

# Segmentation Validator

Use this skill when the user wants to check whether firewall rules align with defined network zones and whether segmentation boundaries are being enforced properly.

## Goal

Help Claude analyze zone definitions and traffic rules, detect problematic cross-zone paths, and explain segmentation weaknesses in a practical, audit-ready way.

## Workflow

1. Confirm the zone definition file and the firewall rule file to review.
2. Normalize the zones and traffic flows so cross-zone paths can be evaluated consistently.
3. Identify unauthorized, risky, or unexpected flows between zones.
4. Highlight whether the issue is a direct rules problem, a missing zone assignment, or unclear network design.
5. Present the findings with enough context for remediation or audit reporting.

## Inputs

Expected inputs from the bundled tool metadata:
- zones: Path to the JSON zone definition file.
- rules: Path to the CSV firewall rules file.

## Bundled Files

- main.py contains the executable segmentation analysis logic.
- README.md provides guidance and examples.
- skill.yaml captures the repo-native metadata for this skill.
- sample_input may contain representative zone and rule data.

## Guidance

Stay focused on trust boundaries and unauthorized movement risk. Explain which zones are involved, what traffic is allowed, and why the flow may violate segmentation intent.