skills.rest
c0x12c
c0x12cOFFICIAL
Explore all skills by this author →
WebsiteGitHub

ops-investigate-alert

Collect metrics, logs, traces, and code changes to identify alert root causes.

96|9|Updated Mar 21, 2026
Search Tags:#monitoring#logs#metrics#traces#github-cli#incident-response#investigate-alerts
One-click install
npx skills add https://github.com/c0x12c/ai-toolkit --skill ops-investigate-alert
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ops-investigate-alert
Source: https://github.com/c0x12c/ai-toolkit/tree/main/toolkit/skills/ops-investigate-alert
Command: npx skills add https://github.com/c0x12c/ai-toolkit --skill ops-investigate-alert

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Investigate monitoring alerts by collecting metrics, logs, traces, and recent code changes to identify root causes and actionable next steps.

Core Features & Use Cases

  • Verify Monitoring MCP Availability: detect available monitoring platforms (Datadog, Grafana, PagerDuty) and determine data sources.
  • Parse Input & Fetch Details: map alert identifiers or URLs to monitors, pull monitor configuration, current state, last trigger, and affected services.
  • Query Metrics & Analyze Logs: gather time-windowed metrics around the alert and search logs for errors, timeouts, or anomalies.
  • Check Traces & Infra (When Available): examine distributed traces for latency or error patterns and check pod status / deployments if Kubernetes data is accessible.
  • Compile Investigation Summary: present a structured report with metrics, logs, traces, infra observations, and root-cause hypothesis.

Quick Start

Run the alert investigation by collecting metrics, logs, traces, and recent code changes for the active alert and produce a structured report.

Frequently Asked Questions about ops-investigate-alert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I investigate a monitoring alert to find its root cause?▼

You investigate alerts by collecting time-windowed metrics, logs, traces, and recent code changes to identify root causes. The skill queries monitoring platforms like Datadog or Grafana to pull alert configurations and analyze anomalies.

Can I analyze logs and metrics from Datadog or Grafana for incident response?▼

Yes, you can analyze logs and metrics from Datadog or Grafana for incident response. The skill detects available monitoring platforms, gathers time-windowed metrics around the alert, and searches logs for errors, timeouts, or anomalies.

Do I need Kubernetes permissions to check pod status during an alert investigation?▼

You do not need Kubernetes permissions to run an alert investigation, but having them allows the skill to check pod status and deployments. It proceeds with whatever data is accessible, examining infrastructure when available.

Does investigating alerts work with GitHub CLI to read deployment history?▼

Yes, investigating alerts works with GitHub CLI to read deployment history and recent code changes. The skill leverages GitHub CLI when available to correlate active alerts with recent deployments and identify potential root causes.

What is the best way to compile an incident response report from traces and logs?▼

The best way to compile an incident response report is to aggregate metrics, logs, traces, and infra observations into a structured summary. The skill presents a compiled investigation report with a root-cause hypothesis and actionable next steps.

Related Skills

Explore More Software Engineering Skills→
rnavarychrnavarych
14

role-devops:monitoring-setup

Configure Prometheus/Grafana, Datadog, and CloudWatch monitoring stacks.

Community
Advanced
abnegateabnegate
2

hotfix

Triage production hotfixes and diagnose root cause from repository and CI context.

Community
Advanced
d0whc3rd0whc3r

error-detective

Analyze logs and stack traces to identify root causes across distributed systems.

Community
Advanced
BjzyLabsBjzyLabs
1

keep-aiops

Manage alerts and orchestrate incident workflows via the Keep AIOps API.

Official
Intermediate