vantage-runbook-pack-builder

Generate incident-linked runbook task packs with phase-based tasks and audit logs.

Updated Feb 20, 2026
One-click install
npx skills add https://github.com/johngutierrez31/VantageAI --skill vantage-runbook-pack-builder
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vantage-runbook-pack-builder
Source: https://github.com/johngutierrez31/VantageAI/tree/main/.agents/skills/vantage-runbook-pack-builder
Command: npx skills add https://github.com/johngutierrez31/VantageAI --skill vantage-runbook-pack-builder

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates the creation and persistence of structured, phase-based task lists for incident response, ensuring operators have clear guidance during critical events.

Core Features & Use Cases

  • Automated Task Pack Generation: Creates a runbook task pack based on incident type and severity.
  • Phase-Based Organization: Groups tasks into logical operational phases (triage, containment, recovery, etc.).
  • Persistence & Auditability: Saves the task pack and individual tasks to the database, with audit logs and timeline events.
  • Duplicate Prevention: Avoids creating redundant tasks if a similar pack already exists.
  • Use Case: When a high-severity security incident is declared, this Skill automatically generates a detailed runbook with tasks for triage, evidence collection, containment, and communication, assigned to the appropriate teams.

Quick Start

Use the vantage-runbook-pack-builder skill to generate a runbook task pack for the active incident.

Frequently Asked Questions about vantage-runbook-pack-builder

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate incident response runbook task creation?

Automated runbook generation prevents duplicate tasks by checking if a similar pack already exists for the incident. It ensures task persistence in IncidentRunbookPack and Task records while logging actions in the incident timeline and audit log.

Can I generate phase-based incident management tasks for high-severity security incidents?

Phase-based organization groups incident response tasks into logical operational phases. This structure provides operators with clear guidance during critical events by separating triage, containment, recovery, and post-incident follow-up into distinct actionable categories.

What is the best way to structure incident response triage and containment tasks?

The best way to structure incident response tasks is through phase-based runbook pack generation. This approach groups triage, containment, recovery, communications, and post-incident follow-up tasks into a structured, persistent format linked to the specific incident.

How do I prevent duplicate runbook tasks when automating incident response?

Preventing duplicate runbook tasks requires checking for existing IncidentRunbookPack records before generation. The runbook pack builder avoids creating redundant tasks if a similar pack already exists for that incident, ensuring a single source of truth.