postmortem

Reconstruct incident timelines and perform root cause analysis from logs.

1|Updated Mar 15, 2026
One-click install
npx skills add https://github.com/blakeox/llm-skills --skill postmortem-blakeox
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: postmortem
Source: https://github.com/blakeox/llm-skills/tree/main/skills/postmortem
Command: npx skills add https://github.com/blakeox/llm-skills --skill postmortem-blakeox

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps teams systematically analyze incidents to identify root causes, improve processes, and prevent recurrence by reconstructing event timelines and evaluating contributing factors.

Core Features & Use Cases

  • Incident Reconstruction: Collects evidence from git history, deploy logs, and monitoring systems to map out incident timelines.
  • Root Cause Analysis: Performs Five Whys analysis, questioning processes and narratives to uncover systemic issues.
  • Reporting & Action Planning: Generates structured summaries with recommendations to address identified weaknesses.
  • Use Case: A team experiences a production outage; this Skill guides them through a detailed postmortem to understand what went wrong and how to improve.

Quick Start

Use the postmortem skill to analyze the recent deployment failure documented in your incident logs.

Frequently Asked Questions about postmortem

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I conduct a root cause analysis for a production incident using git history and deploy logs?

Root cause analysis for a production incident reconstructs event timelines by collecting evidence from git history, deploy logs, and monitoring systems. It applies Five Whys questioning to uncover systemic issues and generates structured reports with actionable recommendations.

What is the best way to structure a postmortem report after a deployment failure?

A structured postmortem report maps out the incident timeline from detailed logs and documentation, performs root cause analysis, and generates actionable summaries. This process identifies contributing factors and provides recommendations to address weaknesses and prevent recurrence.

How does Five Whys analysis work during an incident retrospective?

Five Whys analysis during an incident retrospective systematically questions processes and narratives to uncover systemic issues. By repeatedly asking why an event occurred, it moves past surface-level symptoms to identify the fundamental root cause of the incident.

Can I use incident logs and monitoring data to reconstruct an outage timeline?

You can reconstruct an outage timeline by collecting evidence from monitoring systems, deploy logs, and documentation. The incident reconstruction process maps these data points chronologically to evaluate contributing factors and understand exactly what went wrong.

What do I need to perform a thorough post-incident review for process improvement?

Performing a thorough post-incident review requires detailed logs, documentation, and an evidence review process. These inputs enable comprehensive timeline reconstruction and root cause analysis to generate actionable recommendations for organizational process improvement.