Skill UI

This tool provides a comprehensive framework for analyzing web server logs (Apache/Nginx) to detect various security threats. It uses advanced regex matching against OWASP attack signatures to identify SQL injection, Local File Inclusion, and Directory Traversal attempts, alongside behavioral analysis for brute-force attacks and web scanner fingerprints. The system also enriches data using GeoIP for source attribution, generating a prioritized report for SOC analysts.

Plans first, then orchestrates dynamic multi-agent workflows with adversarial verification via a local odw daemon or native fallback. Supports 16-100 parallel agents, sandboxed scripts, SQLite checkpoints, and crash-resume for tasks spanning many files or items.