API Gateway Log Analysis

API Gateway Log Analysis is a Data skill for Claude Code, published by mukul975 in Anthropic-Cybersecurity-Skills.

27.8K stars3.4K forkson mukul975/Anthropic-Cybersecurity-SkillsAdded 2026/08/14Repository updated 2026/08/08

ai-agentsclaude-codecloud-securitycybersecuritydevsecopsethical-hackingincident-responseinfosecllmmalware-analysismcpmitre-attacknist-csfosintpenetration-testingred-teamsecuritysecurity-automationthreat-huntingthreat-intelligence

Install in seconds

Install API Gateway Log Analysis

Copy API Gateway Log Analysis into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/mukul975/Anthropic-Cybersecurity-Skills/tree/main/skills/analyzing-api-gateway-access-logs ~/.claude/skills/analyzing-api-gateway-access-logs

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/analyzing-api-gateway-access-logs/SKILL.md in mukul975/Anthropic-Cybersecurity-Skills
Installs to: ~/.claude/skills/analyzing-api-gateway-access-logs
Collection: One of 25 skills cataloged from this repository
Category: Data — 668 skills

What API Gateway Log Analysis does

API Gateway Log Analysis parses API Gateway access logs (AWS API Gateway, Kong, Nginx) to detect attack patterns such as BOLA, excessive data exposure, and injection attempts. Use it when investigating security incidents or building detection rules.

API Gateway Log Analysis is cataloged under Data on DirSkills. API Gateway Log Analysis comes from a repository tagged ai-agents, claude-code, cloud-security, cybersecurity and devsecops.

Documentation

README

Excerpt

Analyzing API Gateway Access Logs

When to Use

When investigating security incidents that require analyzing api gateway access logs
When building detection rules or threat hunting queries for this domain
When SOC analysts need structured procedures for this analysis type
When validating security monitoring coverage for related attack techniques

Prerequisites

Familiarity with security operations concepts and tools
Access to a test or lab environment for safe execution
Python 3.8+ with required dependencies installed
Appropriate authorization for any testing activities

Instructions

Parse API gateway access logs to identify attack patterns including broken object level authorization (BOLA), excessive data exposure, and injection attempts.

This is the opening of the README. Read the full README on GitHub.

Frequently asked about API Gateway Log Analysis

What else does mukul975 publish alongside API Gateway Log Analysis?
API Gateway Log Analysis is one of 25 skills that DirSkills catalogs from mukul975/Anthropic-Cybersecurity-Skills, the repository it ships in. Its siblings there include Abusing DPAPI for Credential Access, Achieving CMMC Level 2 Compliance and Add New Skill. Each one is a separate skill with its own page in this directory, installs the same way API Gateway Log Analysis does, and is maintained by mukul975 in that same repository. The rest of the collection is listed on the mukul975/Anthropic-Cybersecurity-Skills page.
How does API Gateway Log Analysis compare to other Data skills?
API Gateway Log Analysis ranks #62 by stars among the 668 Data skills in this catalog. The most-starred ones next to it are Benchmark Methodology, Jupyter Notebook and Solana. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of API Gateway Log Analysis against them. Open each page to compare what they document and how they install.