incident-classification

Classify, prioritize, and route incidents by severity and category.

2|Updated Feb 4, 2026
One-click install
npx skills add https://github.com/PaulKinlan/docker-agent-test --skill incident-classification
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: incident-classification
Source: https://github.com/PaulKinlan/docker-agent-test/tree/main/config/skills/ops/incident-classification
Command: npx skills add https://github.com/PaulKinlan/docker-agent-test --skill incident-classification

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the critical first step of incident response: classifying incoming issues by severity, category, and impact, ensuring they are routed to the right people quickly.

Core Features & Use Cases

  • Automated Classification: Analyzes incident reports to determine severity (P0-P3), category (System, Data, Security, etc.), and blast radius.
  • Intelligent Routing: Assigns primary, secondary, and notification roles based on incident type.
  • Use Case: When a user reports a "system outage affecting all users," this Skill will classify it as a P0 Critical System incident, route it to the 'devops' persona as primary, and notify the 'manager', generating a detailed classification card.

Quick Start

Classify the incident described in the file '/home/shared/inbox/incident.txt'.

Frequently Asked Questions about incident-classification

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate incident classification and routing for incoming ops alerts?

Automated incident classification analyzes incoming reports to determine severity, category, and blast radius, then routes them to appropriate personnel. It evaluates incident text against predefined definitions to generate a structured classification card and notify assigned roles instantly.

What is the best way to prioritize incident response alerts by severity and blast radius?

Prioritizing incident response alerts involves analyzing reports to assign severity levels from P0 to P3 and identifying the affected components. The classification mechanism evaluates the blast radius of the issue to ensure critical system outages are escalated correctly.

How do I route classified incidents to specific devops or manager roles automatically?

Routing classified incidents uses predefined category and severity definitions to assign primary, secondary, and notification roles. When a system outage is detected, the routing logic notifies the devops persona as primary and the manager persona automatically.

Do I need bash and jq to run automated incident classification?

You need bash scripting with tools like jq, mail, and custom helper scripts to run automated incident classification. The environment requires these dependencies to parse incident data, generate the classification card, and execute task and artifact management.

Can I parse a raw incident text file to determine urgency and affected components?

You can parse a raw incident text file to determine urgency and affected components. The classification mechanism analyzes the incident report content to extract impact details, evaluate blast radius, and output a structured severity classification.

What are the limitations of using bash scripts for incident alerting and severity classification?

Using bash scripts for incident alerting and severity classification requires strict adherence to predefined severity and category definitions. If the incident report lacks structured data, the jq parsing and automated routing logic may fail to determine the correct blast radius.