awf-debug-tools

Parse AWF logs and container health to diagnose firewall problems.

123|45|Updated Oct 16, 2025
One-click install
npx skills add https://github.com/github/gh-aw-firewall --skill awf-debug-tools
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: awf-debug-tools
Source: https://github.com/github/gh-aw-firewall/tree/main/.claude/skills/awf-debug-tools
Command: npx skills add https://github.com/github/gh-aw-firewall --skill awf-debug-tools

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Practical Python scripts that streamline debugging AWF firewall issues by reducing verbose Docker/log outputs and providing actionable, parseable results.

Core Features & Use Cases

  • Automated diagnostics: health checks for awf-squid and awf-agent, container status, network reachability, and DNS config.
  • Log parsing: parse Squid access logs to extract blocked domains and generate concise stats.
  • Container inspection: provide concise status, IPs, health, processes, and recent logs for AWF containers.
  • JSON and table outputs: machine-readable outputs for agent parsing and human-friendly summaries.
  • Use Case: quickly triage blocked domains, verify allowlists, and surface root causes.

Quick Start

Run the automated diagnostic and log-parsing workflow to generate a concise AWF health report.

Frequently Asked Questions about awf-debug-tools

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I debug blocked domains in an awf firewall deployment?

The Skill parses Squid access logs to extract blocked domains and generates concise stats for awf firewall deployments. This allows you to quickly triage blocked domains, verify allowlists, and surface root causes.

How do I check the health of awf-squid and awf-agent containers?

You can inspect awf-squid and awf-agent container health using automated diagnostic checks. The tool provides concise status, IPs, health, processes, and recent logs for AWF containers to help diagnose issues.

What is the best way to diagnose network egress and DNS config issues in AWF?

Diagnosing network egress and DNS configuration issues in AWF is best handled by running automated diagnostic checks. The tool analyzes container health and network reachability to provide actionable, parseable results.

Can I get machine-readable JSON output for agent consumption when inspecting Docker logs?

Yes, you can get machine-readable JSON output for agent consumption when inspecting Docker logs. The tool offers both JSON and table outputs to provide concise summaries suitable for quick agent parsing.

Does this diagnostic tool require any external dependencies to run AWF checks?

No external dependencies are required to run AWF checks. The Skill operates using included Python scripts to parse log data and inspect container health without needing additional installed packages.

Why should I use a dedicated script instead of raw Docker logs for Squid configuration troubleshooting?

Using a dedicated script for Squid configuration troubleshooting reduces verbose Docker log outputs into actionable results. It parses Squid access logs directly to surface root causes faster than manual log filtering.