incident-response

Coordinate triage and classification for SEV 1-4 incidents using runbooks.

3|Updated Mar 25, 2026

Search Tags:#incident response #triage #runbooks #security breach #emergency management

Ready to run

npx skills add https://github.com/adihebbalae/Attacca --skill incident-response-adihebbalae

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: incident-response
Source: https://github.com/adihebbalae/Attacca/tree/main/addons/kiro/.kiro/skills/incident-response
Command: npx skills add https://github.com/adihebbalae/Attacca --skill incident-response-adihebbalae

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides pre-written incident response runbooks and decision frameworks to streamline the process of responding to production incidents, critical failures, or emergency deployments.

Core Features & Use Cases

Incident Classification: Categorizes incidents by severity, impact, and response time.
Runbook Index: Offers a list of common incident types with detailed runbooks.
Medic Agent: Activates the medic agent persona for SEV 1 emergencies.
Use Case: When a severe security breach occurs, use this Skill to quickly access the relevant runbook and activate the medic agent for immediate action.

Quick Start

Use the incident-response skill to handle a SEV 1 incident.

Frequently Asked Questions about incident-response

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I handle a SEV 1 production incident?▼

To handle a SEV 1 production incident, this skill activates a medic agent persona and executes structured response runbooks to coordinate triage, classify severity, and manage the emergency.

What is the best way to classify incident severity during a security breach?▼

Incident classification is best handled by categorizing the security breach using structured decision frameworks that evaluate impact and response time to assign a SEV 1-4 severity level.

Can I use pre-defined runbooks for emergency management and triage?▼

Yes, you can use pre-defined runbooks for emergency management. The skill provides a runbook index offering detailed procedures for common incident types to streamline triage and execution during critical failures.

Do I need a runbook index to coordinate incident response?▼

Yes, accessing the skill's runbook index is required to coordinate incident response, as it supplies the pre-written decision frameworks and procedures needed to classify severity and execute responses effectively.

When should I activate a medic agent for a critical failure?▼

You should activate the medic agent persona during SEV 1 emergencies or severe security breaches when immediate, structured action is required to manage the critical failure and execute response runbooks.