Agent skill · operations · alirezarezvani
incident-commander
Use when declaring or running a production incident or outage, or writing its post-incident review. Classifies severity with incident_classifier.py, rebuilds the timeline with timeline_reconstructor.py and drafts the PIR with pir_generator.py. Security incidents: incident-response.
Why this skill is useful
Adds 3 executable scripts for incident classification, timeline reconstruction, and post-incident review generation that enhance incident management capabilities.
What it needs
Requires python installed locally. About 8k tokens when loaded. Last updated 2026-08-05. 23,939 stars on the source repository.
What this skill does
Incident Commander Skill Category: Engineering Team Tier: POWERFUL Author: Claude Skills Team Version: 1.0.0 Last Updated: February 2026 Overview Incident response framework for availability/reliability incidents (outages, degradations, failed deploys): severity classification, timeline reconstruction, and post-incident review. This is NOT security incident triage. For security events (ransomware, intrusion, data exfiltration, IOC analysis, NIST SP 800-61 forensics), route to incident-response. Both skills use SEV1-SEV4 labels; this one scores operational impact (users, revenue, SLA), while incident-response classifies attack types and forensic handling. Key Features Automated Severity Classification - Intelligent incident triage based on impact and urgency metrics Timeline Reconstruction - Transform scattered logs and events into coherent incident narratives Post-Incident Review Generation - Structured PIRs with multiple RCA frameworks Communication Templates - Pre-built templates for stakeholder updates and escalations Runbook Integration - Generate actionable runbooks from incident patterns Skills Included Core Tools 1. Incident Classifier (incidentclassifier.py) Analyzes incident descriptions and outputs severity levels Recommends response teams and initial actions Generates communication templates based on severity 2. Timeline Reconstructor (timelinereconstructor.py) Processes timestamped events from multiple sources Reconstructs chronological incident timeline Identifies gaps and provides duration analysis 3. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills alirezarezvani/incident-commander--c391e1