How do I install the Log Triage skill?

Run npx skillmds@latest add kelvint-cli/log-triage in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Log Triage safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Log Triage?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Log Triage free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Log Triage?

kelvint-cli (@kelvint-cli) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Log Triage by kelvint-cli — Agent Skill

Name: Log Triage
Author: kelvint-cli

Log Triage

Summarizes local application or identity logs from a JSONL or text file. Counts levels, groups repeated messages, and prints the latest errors. Use when the user pastes logs, names a log file, or asks to triage, investigate, or summarize errors without a live Elastic or SIEM cluster.

kelvint-cli Updated Sep 22, 2026

File contents

Log triage

Read a local log file. Do not call a remote cluster, VPN, or employer API.

When to use

The user has a .jsonl, .log, or .txt export and wants a short incident-style summary.

How to run

python3 skills/log-triage/scripts/triage.py PATH_TO_LOG

From this repo:

python3 skills/log-triage/scripts/triage.py skills/log-triage/fixtures/sample.jsonl

The script accepts JSON Lines objects with timestamp, level, source, and message. Plain text lines are treated as messages with level INFO, or ERROR if the line contains error or fail.

What to report

Time range and line count.
Counts by level.
Top repeated messages (max 5).
Last 5 error-level lines, verbatim.
One sentence on what to check next. Do not invent a root cause.

Rules

Do not send log contents to a third-party API unless the user asks.
Redact emails, tokens, and hostnames that look internal before quoting in chat, unless the file is the bundled fixture.
If the file is empty or unreadable, say so and stop.

Frequently asked questions