Agent skill · security · aiskillstore

incident-response-incident-response

Use when working with incident response incident response

Why this skill is useful

Provides structured incident response workflows and specific commands for incident detection and mitigation that the AI wouldn't reliably generate on its own.

What it needs

About 6k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.

What this skill does

Use this skill when Working on incident response incident response tasks or workflows Needing guidance, best practices, or checklists for incident response incident response Do not use this skill when The task is unrelated to incident response incident response You need a different domain or tool outside this scope Instructions Clarify goals, constraints, and required inputs. Apply relevant best practices and validate outcomes. Provide actionable steps and verification. If detailed examples are required, open resources/implementation-playbook.md. Orchestrate multi-agent incident response with modern SRE practices for rapid resolution and learning: [Extended thinking: This workflow implements a comprehensive incident command system (ICS) following modern SRE principles. Multiple specialized agents collaborate through defined phases: detection/triage, investigation/mitigation, communication/coordination, and resolution/postmortem. The workflow emphasizes speed without sacrificing accuracy, maintains clear communication channels, and ensures every incident becomes a learning opportunity through blameless postmortems and systematic improvements.] Configuration Severity Levels P0/SEV-1: Complete outage, security breach, data loss - immediate all-hands response P1/SEV-2: Major degradation, significant user impact - rapid response required P2/SEV-3: Minor degradation, limited impact - standard response P3/SEV-4: Cosmetic issues, no user impact - scheduled resolution Incident Types Performance degradation Service outage Security incident Data integrity issue Infrastructure failure Third-party service disruption Phase 1: Detection & Triage 1. Incident Detection and Classification Use Task tool with subagenttype="incident-responder" Prompt: "URGENT: Detect and classify incident: $ARGUMENTS. Analyze alerts from PagerDuty/Opsgenie/monitoring. …

How to use it

Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:

@skills aiskillstore/incident-response-incident-response

View the source on GitHub

Browse the @skills marketplace