skills.rest
Tommy-yw
Tommy-ywCOMMUNITY
Explore all skills by this author →
GitHub

common-incident-triage

Normalize production incident data and plan response actions.

539|39|Updated May 1, 2026
Search Tags:#SRE#AIOps#incident triage#evidence-based decision-making#systemic troubleshooting
One-click install
npx skills add https://github.com/Tommy-yw/RunbookHermes --skill common-incident-triage
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: common-incident-triage
Source: https://github.com/Tommy-yw/RunbookHermes/tree/main/skills/runbooks/common-incident-triage
Command: npx skills add https://github.com/Tommy-yw/RunbookHermes --skill common-incident-triage

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This skill solves the challenge of effectively managing incident triage by providing a systematic approach to normalizing incident data and guiding the user through evidence collection, hypothesis formation, and action planning.

Core Features & Use Cases

  • Incident Normalization: Converts raw incident data into structured service, severity, environment, and time window information.
  • Evidence Collection: Directs users to collect metrics, logs, traces, and deployment history.
  • Hypothesis Formation: Encourages users to build a hypothesis only after evidence is gathered.
  • Action Planning: Recommends actions, enforcing safety measures such as approval for destructive operations.
  • Use Case: Imagine a system experiencing a service disruption. Use this skill to quickly triage the incident, understand the problem scope, and develop a plan to resolve the issue with a low risk of introducing new issues.

Quick Start

Utilize the 'common-incident-triage' skill to normalize and analyze the incident details for 'service X' in the 'production' environment during the last '30 minutes'.

Frequently Asked Questions about common-incident-triage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I streamline incident triage for production system disruptions?▼

Streamline incident triage by normalizing raw incident data into structured service, severity, and time window information, then guiding evidence collection and action planning to resolve issues safely.

What is the best way to normalize raw incident data for SRE analysis?▼

Normalize raw incident data by converting it into structured formats covering service, severity, environment, and time window details. This provides a consistent baseline for evidence collection and hypothesis formation.

How does evidence-based decision-making work during incident response?▼

Evidence-based decision-making works by enforcing the collection of metrics, logs, and traces before forming hypotheses. This systematic approach mitigates action errors and prevents introducing new issues.

Does this incident triage process enforce safety measures for destructive operations?▼

Yes, the incident action planning phase enforces safety measures by requiring explicit approval for destructive operations. This risk management framework mitigates the chance of introducing new issues during resolution.

Can I use this incident triage approach in complex IT environments?▼

Yes, this approach is ideal for AIOps and SRE teams operating in complex IT environments. It automates normalization, analysis, and response planning to systematically manage production incidents.

Related Skills

Explore More Software Engineering Skills→
odylithodylith
34

odylith-casebook-bug-investigation

Extract key evidence from Odylith bug records and map it to governed surfaces.

Official
Intermediate
saeed-vayghansaeed-vayghan
30

devops-incident-responder

Diagnose production incidents and coordinate remediation to reduce MTTR.

Community
Advanced
LeandroBenjaminLLeandroBenjaminL

infra-sre

Monitor services and configure alerts using Prometheus and Grafana.

Community
Advanced
PM-ShawnPM-Shawn
269

alert-sop

Analyze system alerts and generate incident reports from SOPs.

Community
Advanced