Diagnose an AWF (Agentic Workflow Firewall) failure from an error, workflow run URL, or symptom. Covers auth (api-proxy, enterprise/BYOK Copilot, OIDC, mcpg), ARC/DinD and self-hosted runners, alternative runtimes (gVisor/Kata/chroot), Squid/DNS/egress denials, CI and gh-aw safe-output failures, and suspected security regressions. Routes to the canonical diagnosis registry in docs/diagnostics.
中文简介正在准备中。当前显示原文说明。
查看安装方法安装前可以查看交给 AI 代理的指令内容。
Single entry point for diagnosing AWF failures. The canonical knowledge lives in the diagnosis registry — this skill only routes and reports.
Read the index — docs/diagnostics/README.md
for boundary routing and specialist references, and
docs/diagnostics/agent-playbook.md
for the report shape and safety rules.
Fingerprint the run: AWF version, runner type (GitHub-hosted /
self-hosted / ARC+DinD / GHES / GHEC), DOCKER_HOST, GITHUB_SERVER_URL,
container runtime, provider, auth mode. Use unknown where unverified.
Classify the failing boundary: runner, runtime, network, auth,
ci, security.
Load only matching records:
npx tsx scripts/diagnostics/cli.ts search "<redacted error string>" --boundary <boundary>
Without a clone, use the portable artifact
.github/agents/diagnose-awf.md (prefer a tag matching your AWF version).
Probe with the matched finding's read-only probe when the match is ambiguous — one probe at a time.
Report: observed symptom, matched finding ID and evidence, affected version/topology, safe next probe, fix/workaround, citations.
AUTH-001, AUTH-002AUTH-001, docs/auth-matrix.mdAUTH-003Check configuration presence/shape, route and health status, and redacted error classes only.
Authorization headers, environment
dumps, inference probes, or token exchanges.--env-all, disabling isolation, or broadening the domain
allowlist by default.SEC-001 and
the repository security review process..github/workflows/shared/self-hosted-failure-modes.md — full runner catalog.github/skills/debug-firewall/SKILL.md — Squid, iptables, container state.github/skills/awf-debug-tools/SKILL.md — log parsing helpers.github/skills/debugging-workflows/SKILL.md — GitHub Actions log retrievaldocs/auth-matrix.md, docs/compatibility.md, docs/troubleshooting.mdFollow docs/diagnostics/patterns.md.
Edit the canonical record, run npm run diagnostics:render, and open a reviewed
PR. Never edit generated artifacts or .lock.yml files by hand.
还没有评价。欢迎分享你的使用感受。
无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。
还没有评论。来写第一条吧。
Decide and implement how to support a new LLM provider or agent engine in AWF - either as a proxied provider (api-proxy adapter) or a direct-API engine (domain allowlist only), e.g. Cursor, Aider, or any tool that calls its own endpoint.
中文简介正在准备中。当前显示原文说明。
Route gh-aw design, creation, diagnosis, patching, active debugging, and upgrade requests to the right strategies.
中文简介正在准备中。当前显示原文说明。
Practical Python scripts for debugging awf - parse logs, diagnose issues, inspect containers, test domains
中文简介正在准备中。当前显示原文说明。
Use the AWF (Agentic Workflow Firewall) to run commands with network isolation and domain whitelisting. Provides L7 HTTP/HTTPS egress control for AI agents.
中文简介正在准备中。当前显示原文说明。
Debug the AWF firewall by inspecting Docker containers (awf-squid, awf-agent), analyzing Squid access logs, checking iptables rules, and troubleshooting blocked domains or network issues.
中文简介正在准备中。当前显示原文说明。
Debug GitHub Actions workflows by downloading logs, analyzing summaries, and understanding how agentic workflows and the AWF firewall work together.
中文简介正在准备中。当前显示原文说明。