sre-incident

Triages active production incidents with evidence-driven hypothesis scoring and root cause confirmation.

Updated Jul 22, 2026
One-click install
npx skills add https://github.com/Trigent-Software-Pvt-Ltd/trigen-aidlc --skill sre-incident-trigent-software-pvt-ltd
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sre-incident
Source: https://github.com/Trigent-Software-Pvt-Ltd/trigen-aidlc/tree/main/plugins/ai-sre/skills/sre-incident
Command: npx skills add https://github.com/Trigent-Software-Pvt-Ltd/trigen-aidlc --skill sre-incident-trigent-software-pvt-ltd

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? During a live outage, engineers often jump to conclusions based on gut feel or a single log line, leading to wrong fixes and prolonged downtime. This Skill enforces disciplined incident triage by collecting evidence in parallel, scoring hypotheses against a visible scorecard, and requiring proof before declaring a root cause. ## Core Features & Use Cases - Parallel Evidence Collection: Launches five concurrent tracks (recent changes, service health, topology, telemetry, runbooks) across AWS, Kubernetes, Azure, New Relic, and Confluence. - Hypothesis Scorecard: Normalizes every finding into typed signals (VERIFIED, CORRELATED, SUSPECTED, VERIFIED_NEGATIVE), scores the top 5 hypotheses, and automatically eliminates contradicted ones. - Root Cause vs Mitigation Separation: Enforces hard rules so irreversible mitigation always requires a confirmed root cause, with a SEV1 fast path for reversible mitigation. - Use Case: When push notifications stop working across multiple school products, run the skill with the product and symptom; it correlates CloudTrail changes, ECS health, and telemetry to pinpoint a shared dependency failure and produce a remediation plan. ## Quick Start Ask the assistant to triage an incident by running /ai-sre:sre-incident with a product name and symptom, for example "psw-us push notifications failing since 14:00 UTC".

Frequently Asked Questions about sre-incident

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I triage a production incident with evidence-based root cause analysis?

Invoke the skill with a product slug and symptom, such as "/ai-sre:sre-incident psw-us api failing". It launches five parallel evidence tracks, normalizes findings into signals, scores hypotheses, and confirms root cause only with corroborating proof.

What evidence sources does incident triage collect from?

It queries CloudTrail and Azure Activity Log for recent changes, ECS and kubectl for service health, security groups and ingress for topology, New Relic and CloudWatch for telemetry, and Confluence for matching runbooks.

Can the skill apply mitigation before root cause is confirmed?

Reversible mitigation before confirmed root cause is allowed only for SEV1 incidents and only on one VERIFIED signal. Irreversible mitigation always requires a confirmed root cause with no exceptions.

Which products and platforms does the incident skill support?

It supports Trigent products including EM, PSW (US and Canada), Volunteer, Dismissal, SmartPass, SchoolPass, and shared platform services, routing each through product knowledge base files resolved via KB-RESOLVER.

What happens when evidence collection has limited access?

With fewer than 3 independent signals, all hypotheses are marked LOW CONFIDENCE and the skill recommends escalation. Access level caps the confidence ceiling: limited access caps at MEDIUM, external-only at LOW.