wr-itil:mitigate-incident

Record mitigation attempts and transition incident lifecycle from Investigating to Mitigating.

4|1|Updated Apr 7, 2026

Search Tags:#governance #evidence #audit-trail #incident #itil #mitigate

Ready to run

npx skills add https://github.com/windyroad/agent-plugins --skill wr-itil-mitigate-incident

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: wr-itil:mitigate-incident
Source: https://github.com/windyroad/agent-plugins/tree/main/packages/itil/skills/mitigate-incident
Command: npx skills add https://github.com/windyroad/agent-plugins --skill wr-itil-mitigate-incident

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Records mitigation attempts against an active incident and transitions its lifecycle from Investigating to Mitigating on the first attempt, while preserving a complete audit trail of all subsequent mitigations.

Core Features & Use Cases

Transitions an incident file from .investigating.md to .mitigating.md on the first mitigation and updates the Status field accordingly.
Appends each mitigation attempt to the Mitigation attempts timeline with precise UTC timestamps.
Maintains a chronological Timeline log and a comprehensive audit trail for governance reviews.
Enables compliant workflows under ADR-011 by requiring evidence-backed hypotheses for the first mitigation and recording outcomes for post-incident analysis.

Quick Start

Invoke the mitigate-incident skill with an incident ID and a concise mitigation description to transition an active incident from investigating to mitigating and record the attempt.

Frequently Asked Questions about wr-itil:mitigate-incident

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I record incident mitigation attempts and maintain an audit trail?▼

To record incident mitigation attempts, invoke this skill with an incident ID and mitigation description. It appends each action to a timeline with precise UTC timestamps, ensuring a complete audit trail for governance reviews.

How does an incident lifecycle transition from investigating to mitigating?▼

An incident lifecycle transitions from investigating to mitigating on the first mitigation attempt. The skill automatically renames the incident file from `.investigating.md` to `.mitigating.md` and updates the Status field accordingly.

What is required for the first mitigation attempt under ADR-011 governance?▼

The first mitigation attempt under ADR-011 governance requires an evidence-backed hypothesis. This skill enforces the requirement, ensuring compliant workflows and recording outcomes for post-incident analysis.

Can I log multiple mitigation actions for post-incident review?▼

Yes, you can log multiple mitigation actions for post-incident review. The skill logs every mitigation attempt chronologically in a comprehensive audit trail and timeline maintained within the incident file.

Do I need a specific incident file format to record ITIL incident mitigations?▼

You need an active incident file managed under ADR-011 with an `.investigating.md` extension. The skill parses the incident ID, renames the file on first transition, and updates the status and timeline.