How does the Incident skill integrate with other tools?

It coordinates with Watchdog for health checks, Sentinel for security audits, Autopsy for RCA, and Journal for maintaining a chronological record of decisions.

Does it support security-related incidents?

Yes, it includes a mandatory Security Gate that invokes Sentinel to check for PII exposure, unauthorized access patterns, or dependency vulnerabilities before closing the incident.

What is the 'containment-first' approach in this skill?

It is a safety protocol that ensures the system is stabilized via rollbacks or traffic shifts before developers begin root-cause analysis, preventing the incident from worsening during investigation.

Does this skill automatically fix broken code?

No. To maintain system integrity, the skill focuses on containment and investigation. Any actual code fixes are performed as a separate, subsequent task once the system is stable.

When does the Incident skill trigger automatically?

It is triggered by deployment health check failures, watchdog monitoring alerts, or manual invocation when a user reports that a service is down.

Incident Response

Name: Incident Response
Author: Rune-kit

byRune-kit

•

분석 및 모니터링

Automates structured incident response for production outages and service degradations within the Claude Code environment.

The Incident Response skill provides a disciplined, step-by-step framework for handling production failures, ensuring that system containment always precedes deep investigation. By integrating with monitoring, security, and root-cause analysis tools, it guides developers through triage, blast-radius containment, and automated postmortem generation to prevent recurring issues. This skill is essential for teams using Claude Code who need to maintain high availability and professional SRE standards while avoiding the common anti-pattern of debugging during active outages.

주요 기능

01Standardized postmortem documentation with actionable prevention tasks

02Automated severity-based triage (P1-P3) with specific impact indicators

03Integration with Watchdog and Sentinel for health and security verification

0463 GitHub stars

05Containment-first workflow to stabilize production before debugging begins

06Automated incident timeline construction and ADR generation

사용 사례

01Managing a critical production outage (P1) with a strict containment-first protocol

02Generating comprehensive incident reports and postmortems for engineering retrospectives

03Executing automated rollbacks or traffic shifts during post-deploy failures

주요 기능

01Standardized postmortem documentation with actionable prevention tasks

02Automated severity-based triage (P1-P3) with specific impact indicators

03Integration with Watchdog and Sentinel for health and security verification

0463 GitHub stars

05Containment-first workflow to stabilize production before debugging begins

06Automated incident timeline construction and ADR generation

사용 사례

01Managing a critical production outage (P1) with a strict containment-first protocol

02Generating comprehensive incident reports and postmortems for engineering retrospectives

03Executing automated rollbacks or traffic shifts during post-deploy failures