skills.rest
windyroad
windyroadOFFICIAL
Explore all skills by this author →
WebsiteGitHub

wr-itil:mitigate-incident

Record mitigation attempts and transition incident lifecycle from Investigating to Mitigating.

4|1|Updated Apr 7, 2026
Search Tags:#governance#evidence#audit-trail#incident#itil#mitigate
One-click install
npx skills add https://github.com/windyroad/agent-plugins --skill wr-itil-mitigate-incident
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: wr-itil:mitigate-incident
Source: https://github.com/windyroad/agent-plugins/tree/main/packages/itil/skills/mitigate-incident
Command: npx skills add https://github.com/windyroad/agent-plugins --skill wr-itil-mitigate-incident

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Records mitigation attempts against an active incident and transitions its lifecycle from Investigating to Mitigating on the first attempt, while preserving a complete audit trail of all subsequent mitigations.

Core Features & Use Cases

  • Transitions an incident file from .investigating.md to .mitigating.md on the first mitigation and updates the Status field accordingly.
  • Appends each mitigation attempt to the Mitigation attempts timeline with precise UTC timestamps.
  • Maintains a chronological Timeline log and a comprehensive audit trail for governance reviews.
  • Enables compliant workflows under ADR-011 by requiring evidence-backed hypotheses for the first mitigation and recording outcomes for post-incident analysis.

Quick Start

Invoke the mitigate-incident skill with an incident ID and a concise mitigation description to transition an active incident from investigating to mitigating and record the attempt.

Frequently Asked Questions about wr-itil:mitigate-incident

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I record incident mitigation attempts and maintain an audit trail?▼

To record incident mitigation attempts, invoke this skill with an incident ID and mitigation description. It appends each action to a timeline with precise UTC timestamps, ensuring a complete audit trail for governance reviews.

How does an incident lifecycle transition from investigating to mitigating?▼

An incident lifecycle transitions from investigating to mitigating on the first mitigation attempt. The skill automatically renames the incident file from `.investigating.md` to `.mitigating.md` and updates the Status field accordingly.

What is required for the first mitigation attempt under ADR-011 governance?▼

The first mitigation attempt under ADR-011 governance requires an evidence-backed hypothesis. This skill enforces the requirement, ensuring compliant workflows and recording outcomes for post-incident analysis.

Can I log multiple mitigation actions for post-incident review?▼

Yes, you can log multiple mitigation actions for post-incident review. The skill logs every mitigation attempt chronologically in a comprehensive audit trail and timeline maintained within the incident file.

Do I need a specific incident file format to record ITIL incident mitigations?▼

You need an active incident file managed under ADR-011 with an `.investigating.md` extension. The skill parses the incident ID, renames the file on first transition, and updates the status and timeline.

Related Skills

Explore More Software Engineering Skills→
FlintmereFlintmere

debug-prod-incident

Trace production incidents into evidence-backed timelines and root-cause hypotheses.

Official
Advanced
TeoSlayerTeoSlayer
7

pilot-audit-log

Generate structured audit trails for Pilot Protocol activity.

Community
Advanced
sfinessfines

bmad-investigate

Automate forensic case investigation by grading evidence and managing case files.

Community
Advanced
BaneeishaqueBaneeishaque

Text to Markdown Conversion

Convert delimiter-separated .txt trackers into Markdown tables with emoji statuses and rename files to .md.

Community
Intermediate