incident-response

Coordinate triage and classification for SEV 1-4 incidents using runbooks.

3|Updated Mar 25, 2026
One-click install
npx skills add https://github.com/adihebbalae/Attacca --skill incident-response-adihebbalae
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: incident-response
Source: https://github.com/adihebbalae/Attacca/tree/main/addons/kiro/.kiro/skills/incident-response
Command: npx skills add https://github.com/adihebbalae/Attacca --skill incident-response-adihebbalae

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides pre-written incident response runbooks and decision frameworks to streamline the process of responding to production incidents, critical failures, or emergency deployments.

Core Features & Use Cases

  • Incident Classification: Categorizes incidents by severity, impact, and response time.
  • Runbook Index: Offers a list of common incident types with detailed runbooks.
  • Medic Agent: Activates the medic agent persona for SEV 1 emergencies.
  • Use Case: When a severe security breach occurs, use this Skill to quickly access the relevant runbook and activate the medic agent for immediate action.

Quick Start

Use the incident-response skill to handle a SEV 1 incident.

Frequently Asked Questions about incident-response

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I handle a SEV 1 production incident?

To handle a SEV 1 production incident, this skill activates a medic agent persona and executes structured response runbooks to coordinate triage, classify severity, and manage the emergency.

What is the best way to classify incident severity during a security breach?

Incident classification is best handled by categorizing the security breach using structured decision frameworks that evaluate impact and response time to assign a SEV 1-4 severity level.

Can I use pre-defined runbooks for emergency management and triage?

Yes, you can use pre-defined runbooks for emergency management. The skill provides a runbook index offering detailed procedures for common incident types to streamline triage and execution during critical failures.

Do I need a runbook index to coordinate incident response?

Yes, accessing the skill's runbook index is required to coordinate incident response, as it supplies the pre-written decision frameworks and procedures needed to classify severity and execute responses effectively.

When should I activate a medic agent for a critical failure?

You should activate the medic agent persona during SEV 1 emergencies or severe security breaches when immediate, structured action is required to manage the critical failure and execute response runbooks.