incident-response

Structure evidence-first incident response and generate an incident-report artifact.

Updated Apr 27, 2026
One-click install
npx skills add https://github.com/vTRKA/supervibe --skill incident-response-vtrka
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: incident-response
Source: https://github.com/vTRKA/supervibe/tree/main/skills/incident-response
Command: npx skills add https://github.com/vTRKA/supervibe --skill incident-response-vtrka

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Incident Response turns chaotic, unstructured debugging during production, security, or data events into a disciplined workflow that prioritizes containment, mitigation, verification, communication, and learning capture with durable evidence.

Core Features & Use Cases

  • Severity triage & response structuring: Classifies events into production incidents, degraded service, security incidents, data issues, or false alarms, then drives the right decision path and cadence.
  • Containment before deep root-cause: Separates containment from mitigation and enforces “verify before completion” so reversible harm reduction happens early.
  • Evidence-backed incident reporting: Produces an incident-report artifact from the repo’s durable template and requires timeline, impact, mitigation evidence, rollback/forward-fix plan, root-cause status, follow-ups, residual risk, and artifact path.
  • Communication & escalation guardrails: Ensures updates follow severity cadence, approval boundaries, and redaction expectations (especially for security/data).

Quick Start

Use incident-response when a production outage, security concern, data integrity issue, degraded service, or alert false alarm requires a severity triage and an evidence-based incident report.

Frequently Asked Questions about incident-response

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I structure incident response triage for a production outage?

Incident response triage classifies production outages by severity and type, driving a structured decision path that prioritizes evidence-backed containment, mitigation, and verification before deeper root-cause analysis.

What is the best way to stabilize a security incident with evidence-first containment?

Stabilizing a security incident requires separating immediate containment from mitigation, enforcing reversible harm reduction early, and grounding all actions in preserved logs and traces before verifying completion.

How do I generate an incident report artifact with mitigation evidence and rollback plans?

Generating an incident report artifact requires capturing structured fields including timeline, impact, mitigation evidence, rollback or forward-fix plan, root-cause status, and residual risk directly from the incident workflow.

Does incident response handle false alarms and degraded services, or only full outages?

Incident response handles false alarms and degraded services alongside full outages by applying severity triage to classify the event type and driving the appropriate response cadence and decision path.

How do I manage escalation cadence and data redaction during a data integrity incident?

Managing escalation during a data integrity incident involves following severity-based communication cadences, respecting approval boundaries, and applying redaction expectations to updates to prevent sensitive data exposure.

When should I execute a rollback versus a forward-fix during incident mitigation?

A rollback is executed when reversible harm reduction is needed to stabilize quickly, whereas a forward-fix is chosen when the mitigation evidence supports applying a corrective update directly to resolve the incident.