skills.rest
Nightreaver
NightreaverCOMMUNITY
Explore all skills by this author →
GitHub

ssh-incident-response

Automates diagnostic workflows for SSH host incident response.

6|Updated Apr 17, 2026
Search Tags:#diagnostics#incident response#ssh#security auditing#system recovery
One-click install
npx skills add https://github.com/Nightreaver/python-ssh-mcp --skill ssh-incident-response
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ssh-incident-response
Source: https://github.com/Nightreaver/python-ssh-mcp/tree/main/runbooks/ssh-incident-response
Command: npx skills add https://github.com/Nightreaver/python-ssh-mcp --skill ssh-incident-response

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ssh, python, and includes scripts (resource) components.

What problem does it solve?

This Skill automates diagnostics for unresponsive or erratic SSH hosts, streamlining the incident response process for quicker recovery.

Core Features & Use Cases

  • Host Reachability Confirmation: Checks if the host is reachable and identifies network or host key issues.
  • Host Identity Verification: Verifies the identity of the host to prevent MITM attacks.
  • Baseline Metric Collection: Gathers essential metrics like system information, disk usage, process data, and alerts.
  • Targeted Triage: Offers guidance on next steps based on the symptoms identified, such as disk breaches or Docker container issues.

Quick Start

Use the ssh-incident-response skill to perform an incident response diagnosis on the host 'web01'.

Frequently Asked Questions about ssh-incident-response

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate SSH incident response diagnostics for an unresponsive host?▼

Automate SSH incident response diagnostics by using scripts to check host reachability, verify host identity against MITM attacks, and collect baseline metrics like disk usage and process data for rapid recovery.

What is the best way to troubleshoot SSH connectivity and host key verification issues?▼

Troubleshoot SSH connectivity and host key issues by running automated diagnostic workflows that confirm host reachability and verify host identity to detect network failures or potential man-in-the-middle attacks.

Can I use Python scripts to collect system health metrics during an SSH incident response?▼

Yes, you can use Python-based tools to execute commands during SSH incident response, gathering essential system health metrics such as system information, disk usage, and active process data.

How do I triage system recovery after identifying disk breaches or Docker container issues on an SSH host?▼

Triage system recovery by following targeted diagnostic protocols that analyze collected baseline metrics, offering guidance on next steps for specific symptoms like disk breaches or Docker container issues.

What prerequisites do I need to run multi-step incident response protocols on SSH hosts?▼

You need active SSH access to the target host and Python-based tools installed to execute command-line diagnostics and run multi-step incident response protocols for system health monitoring.

Why does my SSH incident response workflow fail to identify erratic host performance?▼

SSH incident response workflows may fail if baseline metric collection is incomplete, preventing the system from gathering necessary process data, disk usage, and alerts needed to triage erratic performance.

Related Skills

Explore More Software Engineering Skills→
JuanMS20JuanMS20

github-auth

Configure GitHub authentication for Hermes Agent using git, gh CLI, or SSH credentials.

Community
Intermediate
NightreaverNightreaver
6

ssh-docker-incident-response

Diagnose and resolve Docker container issues via SSH commands.

Community
Advanced
89jobrien89jobrien
4

devops-runbooks

Create operational runbooks for incident response, maintenance, and disaster recovery.

Community
Advanced
jackspacejackspace
16

claude-agent-sdk

Orchestrate Claude-based agents with MCP servers and session management.

Community
Advanced