analyze-network

Name: analyze-network
Availability: InStock
Author: stevessr

Analyze captured AI agent network traffic to identify connections and anomalies.

Updated Apr 20, 2026

Search Tags:#ai agents #network analysis #ebpf #traffic monitoring #process tracing #security observability

Ready to run

npx skills add https://github.com/stevessr/agent-ebpf-filter --skill analyze-network

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: analyze-network
Source: https://github.com/stevessr/agent-ebpf-filter/tree/main/.claude/skills/analyze-network
Command: npx skills add https://github.com/stevessr/agent-ebpf-filter --skill analyze-network

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps investigate and understand AI agent network behavior by turning captured network telemetry into actionable insights about connections, destinations, and potential anomalies.

Core Features & Use Cases

Network Flow Analysis: Examine TCP/UDP connections, DNS associations, TLS SNI data, and process attribution from captured agent activity.
Behavior Investigation: Trace specific processes, detect suspicious outbound connections, analyze network fingerprints, and correlate events across agent executions.
Security Response Support: Assist with identifying risky destinations, validating allowlists, and preparing enforcement decisions for monitored AI agents.

Quick Start

Use the analyze-network skill to inspect current network flows and identify unusual outbound connections from an AI agent.

Frequently Asked Questions about analyze-network

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I analyze AI agent network traffic for anomalous outbound connections?▼

Network flow analysis examines TCP/UDP connections, DNS associations, and TLS SNI data from captured agent activity. It helps interpret flow metadata to identify risky destinations and anomalous communication patterns during security observability investigations.

How do I trace AI agent processes and correlate network events?▼

Trace AI agent processes by querying network telemetry sources to map process attribution to TCP/UDP flows. This correlates events across agent executions, validating allowlists and detecting suspicious outbound connections for security response.

Can I use eBPF traffic monitoring data to investigate agent behavior?▼

Yes, eBPF traffic monitoring data can be used as a telemetry source. The skill queries captured flow metadata and process network activity to support monitoring, detection, and enforcement workflows for AI agents.

What is the best way to identify risky destinations from captured network telemetry?▼

The best way to identify risky destinations is to analyze TLS SNI data and DNS associations within the captured network telemetry. This supports security response by preparing enforcement decisions for monitored AI agents.

Do I need pre-captured network telemetry to use analyze-network?▼

Yes, you need pre-captured network telemetry. The skill requires querying existing network telemetry sources to interpret flow metadata, meaning it analyzes captured data rather than performing live packet interception.