incident-response

Guide triage, stabilization, evidence collection, and root-cause analysis for incidents.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/IAG-Patterns/DEMO_COPILOT_SKILLS --skill incident-response-iag-patterns
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: incident-response
Source: https://github.com/IAG-Patterns/DEMO_COPILOT_SKILLS/tree/main/.github/skills/incident-response
Command: npx skills add https://github.com/IAG-Patterns/DEMO_COPILOT_SKILLS --skill incident-response-iag-patterns

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured, repeatable incident response plan that reduces context loss during outages or security events by guiding triage, stabilization, evidence collection, root-cause analysis, and communications.

Core Features & Use Cases

  • Triage and situational awareness: quickly capture impact, scope, and affected systems.
  • Stabilize and recover: implement safe rollbacks, disable features, or throttle load.
  • Evidence collection and analysis: gather logs, metrics, deploys, and reproduction steps to identify root cause.
  • Communications and follow-up: provide timely updates and assign follow-up tasks to ensure reliability improvements.

Quick Start

To activate, invoke the Incident Response skill and follow the step-by-step procedure to triage, stabilize, collect evidence, determine root cause, implement a fix, communicate status, and schedule follow-ups.

Frequently Asked Questions about incident-response

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I structure my incident response process to prevent context loss during outages?

To prevent context loss during incident response, use a structured stepwise workflow that guides triage, stabilization, evidence collection, root-cause analysis, and communications with required artifacts stored in logs and playbooks.

What is the standard incident response workflow for handling production outages and regressions?

The standard incident response workflow for production outages and regressions involves named stages: triage, stabilize and recover, collect evidence, determine root cause, implement a fix, communicate status, and schedule follow-up reliability improvements.

How do I ensure consistent incident communications and follow-up tasks after a major regression?

Ensure consistent incident communications after a major regression by following a defined response plan that provides timely status updates and assigns specific follow-up tasks to drive reliability improvements.

Can I use this incident response workflow for both staging incidents and security events?

Yes, you can use this incident response workflow for both staging incidents and security events, as it automates incident response planning applicable to outages, security events, and major regressions across environments.

What's the best way to gather evidence and perform root-cause analysis during an active outage?

The best way to perform root-cause analysis during an active outage is to systematically gather logs, metrics, deploys, and reproduction steps as required artifacts to identify the root cause with minimal context loss.

Does this incident response skill require any specific monitoring tool dependencies to function?

No specific monitoring tool dependencies are required to function, as the skill provides a dependency-free structured response plan that defines named stages and required artifacts for your existing logs and runbooks.