cyber-defense-team

What problem does it solve?

This Skill automates the end-to-end analysis of security log files to find anomalies, classify risk, and produce an actionable incident report so analysts can triage threats faster and with consistent, auditable output.

Core Features & Use Cases

• Multi-agent pipeline orchestration: Spawns a log ingestor, anomaly detector, risk classifier, and threat reporter in a coordinated sequence.
• Log compatibility: Designed to analyze common log types such as nginx access logs, authentication logs, and syslog entries.
• Deliverables: Produces structured event JSON, anomaly lists, a risk classification JSON, and a final markdown incident report for SOC workflows and incident response.
• Error handling & validation: Validates input presence, reports agent failures, and surfaces partial results if later stages fail.

Quick Start

Run the skill by instructing the AI: /cyber-defense-team /var/log/nginx/access.log