EvilFreelancer

Mikrotik Config Gen — Development skill for Claude Code

Development community

Mikrotik RouterOS skill for generating config.

How to install Mikrotik Config Gen

This entry records only its repository, not the path inside it, so there is no exact command to give. Open EvilFreelancer/mikrotik-config-gen and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Mikrotik Config Gen does

Mikrotik RouterOS skill for generating config.

Alternatives in Development

Claude Config — Built-in /config command to manage settings interactively 81.1k ★
Check 1: Cache Exists? — CLAUDE_DIR="${CLAUDE_CONFIG_DIR:-$HOME/.claude}" CACHE_EXISTS=$(ls -d "$CLAUDE_DIR/plugins/cache/claude-hud" 2 10.9k ★
Octo Doctor — Environment diagnostics — check providers, auth, config, hooks, scheduler, and more 2.8k ★

README

mikrotik-config-gen

An agent skill that generates secure **MikroTik RouterOS v7** configurations from a plain-language description, or reviews and hardens an existing `/export`. It is a portable skill — install it in Claude Code, Cursor, or OpenAI Codex, or just drop the folder into any agent that reads `SKILL.md`, and generate configs anywhere.

Inspired by the web tool at [zille-skill-mikrotik.lovable.app](https://zille-skill-mikrotik.lovable.app/): same idea (plain English → hardened RouterOS v7 script), packaged as a skill so it runs inside your own agent instead of a website.

What it does

Generate — describe the network ("ISP edge with PPPoE WAN and a /24 LAN") and get a deployable .rsc, hardened by default.
Review — paste an existing /export and get a findings list plus a corrected, hardened config.
Harden — a non-optional security baseline: default-drop firewall, disabled unused services, management pinned to a trusted subnet, bogon/anti-spoof filtering, IPv6 firewall parity.
Presets — ISP edge, PPPoE + RADIUS (BNG), site-to-site WireGuard, hotspot captive portal.
Device reference — per-model port/interface data so the agent uses real names (ether1, sfp-sfpplus1, wlan1/wifi1) instead of guessing.
Validate — an offline heuristic linter for the generated script.

Scope: **RouterOS v7 only**. Nothing here is tested on hardware — configs are generated and statically validated; apply them on-device under `/system safe-mode`.

Layout

mikrotik-config-gen/
├─ SKILL.md                 # the skill: workflow + rules the agent follows
├─ references/
│  ├─ workflow.md           # modes, gap questions, build order, delivery
│  ├─ hardening.md          # the security baseline (with commands)
│  ├─ firewall.md           # canonical raw/filter/nat + IPv6 structure
│  └─ routeros7-notes.md    # v7 syntax and v6→v7 gotchas
├─ presets/
│  ├─ isp-edge.md
│  ├─ pppoe-radius-bng.md
│  ├─ wireguard-s2s.md
│