Verified:GitHub

Incident Commander Skill

Manage technology incidents from detection through post-incident review.

Updated Feb 16, 2026

Search Tags:#root cause analysis #incident response #runbook #postmortem #timeline reconstruction #severity classification

Ready to run

npx skills add https://github.com/Nuwanda04/Ballen-Fisk --skill incident-commander-skill-nuwanda04

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Incident Commander Skill
Source: https://github.com/Nuwanda04/Ballen-Fisk/tree/main/.cursor/skills/incident-commander
Command: npx skills add https://github.com/Nuwanda04/Ballen-Fisk --skill incident-commander-skill-nuwanda04

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pypdf, pdfplumber, pdf2image, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides a comprehensive framework for managing technology incidents, ensuring rapid response, clear communication, and thorough post-incident analysis.

Core Features & Use Cases

Automated Severity Classification: Intelligently triage incidents based on impact and urgency.
Timeline Reconstruction: Transform scattered logs into coherent incident narratives.
Post-Incident Review Generation: Create structured PIRs with multiple RCA frameworks.
Use Case: When a critical service outage occurs, this Skill can automatically classify the severity, suggest initial response actions, and generate communication templates for stakeholders, ensuring a swift and organized response.

Quick Start

Use the incident commander skill to classify an incident from the following description: Database is down affecting all users.

Frequently Asked Questions about Incident Commander Skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate severity classification for incident response?▼

Automated severity classification triages incidents by evaluating impact and urgency from a description, enabling rapid incident response prioritization. It assesses the scope of technology outages to suggest appropriate initial response actions.

What is the best way to reconstruct an incident timeline from scattered logs?▼

Timeline reconstruction transforms scattered logs into a coherent incident narrative for post-incident review. This process organizes fragmented chronological data to clarify the exact sequence of events during a technology outage.

How do I generate a post-incident review using multiple root cause analysis methods?▼

Post-incident review generation creates structured PIRs by applying multiple RCA frameworks to the reconstructed incident timeline. It systematically documents root cause analysis findings to ensure thorough post-incident analysis.

Can I get communication templates and escalation paths for incident commanders?▼

Yes, the framework provides incident commanders with standardized communication templates and defined escalation paths. These resources ensure swift, organized stakeholder updates and proper routing during critical service outages.

Do I need PDF processing dependencies to run incident postmortem tasks?▼

Yes, the framework requires PDF processing dependencies like pypdf, pdfplumber, and pdf2image to extract data. These libraries enable the ingestion of external incident documents and logs for timeline reconstruction.