incident-response

Coordinate incident response workflows from detection through postmortem documentation.

1|Updated Mar 19, 2026
One-click install
npx skills add https://github.com/cy-wali/knowledge --skill incident-response-cy-wali
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: incident-response
Source: https://github.com/cy-wali/knowledge/tree/main/engineering/skills/incident-response
Command: npx skills add https://github.com/cy-wali/knowledge --skill incident-response-cy-wali

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Coordinate and execute a structured incident response workflow from detection through postmortem, enabling consistent triage, communications, and documentation.

Core Features & Use Cases

  • Triage & severity assessment: quickly classify impact and assign roles (IC, comms, responders)
  • Communications drafting: generate internal status updates and customer communications
  • Postmortem & action items: produce a blameless postmortem with root cause analysis and improvement steps

Quick Start

Describe the incident and trigger the command /incident-response with the incident details.

Frequently Asked Questions about incident-response

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I coordinate an incident response workflow from detection to postmortem?

Incident response coordination is managed through a structured, phased workflow covering triage, stakeholder communications, mitigation tracking, and blameless postmortem documentation. You trigger the workflow by providing incident details to initiate severity assessment and role assignment.

What is the best way to triage a production outage and assess severity?

Triage a production outage by quickly classifying its impact and assigning specific roles such as Incident Commander, communications lead, and responders. This structured severity assessment ensures consistent handling and prioritization during the incident.

How do I draft internal status updates and customer communications during an outage?

Drafting communications during an outage is handled by generating structured internal status updates and external customer notifications as part of the incident response workflow, ensuring stakeholders receive consistent and timely information.

Can I use this incident response workflow for production alerts requiring mitigation tracking?

Yes, this incident response workflow applies directly to production incidents, outages, and alerts. It enforces a defined phased workflow that includes tracking mitigations, assessing severity, and coordinating responders throughout the event.

How do I produce a blameless postmortem with root cause analysis after an incident?

Producing a blameless postmortem involves generating a post-incident report that includes root cause analysis and actionable improvement steps. This is triggered using the postmortem mode after the incident is resolved.

What are the different modes supported when managing an active incident?

Managing an active incident is supported through three defined modes: new, update, and postmortem. These modes enforce a structured workflow, guiding the process from initial triage through ongoing updates and final documentation.