Agent skill · security · aj-geddes
incident-response-plan
Create and execute incident response procedures for security breaches, data leaks, and cyber attacks. Use when handling security incidents, creating response playbooks, or conducting forensic analysis.
Why this skill is useful
Provides detailed incident response procedures and playbooks that the AI wouldn't reliably generate on its own.
What it needs
About 1k tokens when loaded. Last updated 2026-03-04. 307 stars on the source repository.
What this skill does
Incident Response Plan Table of Contents Overview When to Use Quick Start Reference Guides Best Practices Overview Structured approach to detecting, responding to, containing, and recovering from security incidents with comprehensive playbooks and automation. When to Use Security breach detection Data breach response Malware infection DDoS attacks Insider threats Compliance violations Post-incident analysis Quick Start Minimal working example: Reference Guides Detailed implementations in the references/ directory: Guide Contents --- --- Incident Response Framework Incident Response Framework Node.js Incident Detection & Response Node.js Incident Detection & Response Best Practices ✅ DO Maintain incident response plan Define clear escalation paths Practice incident drills Document all actions Preserve evidence Communicate transparently Conduct post-incident reviews Update playbooks regularly ❌ DON'T Panic or rush Delete evidence Skip documentation Work in isolation Ignore lessons learned Delay notifications
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aj-geddes/incident-response-plan