Does it support post-incident activities?

Absolutely. It facilitates blameless post-mortems using the 'Five Whys' technique to identify process failures and create actionable items for future prevention.

What frameworks does this skill support?

The skill is built on industry-standard frameworks including NIST SP 800-61 and PagerDuty's Incident Response guidelines.

How does it help during an active system outage?

It acts as an Incident Commander, establishing roles, prioritizing containment over investigation, and providing status update templates to keep stakeholders informed.

Can this skill help with security breaches?

Yes, it includes specific workflows for security incident response, including containment, eradication, and post-incident analysis for SecOps teams.

Incident Response Commander

Name: Incident Response Commander
Author: organvm-iv-taxis

byorganvm-iv-taxis

•

分析与监控

Manages IT outages and security incidents through structured triage, stakeholder communication, and blameless post-mortem analysis.

The Incident Response Commander skill transforms Claude into a digital Incident Commander (IC) for SRE and SecOps teams, providing a disciplined framework for handling critical system failures and security breaches. By following industry-standard frameworks like NIST SP 800-61 and PagerDuty IR guidelines, it guides users through high-pressure phases including initial triage, containment, and recovery. The skill ensures order during chaos by establishing clear roles, providing standardized communication templates for stakeholders, and facilitating deep-dive 'Five Whys' root cause analysis to prevent future occurrences.

主要功能

01Standardized communication templates for real-time stakeholder updates.

02Structured 'Five Whys' methodology for conducting blameless post-mortems.

032 GitHub stars

04Framework-aligned workflows following NIST SP 800-61 and PagerDuty standards.

05Observability guidance focusing on the three pillars: logs, metrics, and traces.

06Severity-based triage (SEV-1 to SEV-3) with immediate containment strategies.

使用场景

01Leading cross-functional teams through a post-incident review to identify process improvements.

02Guiding security teams through containment and eradication phases during a potential data breach.

03Coordinating the technical response and communication for high-priority SEV-1 system outages.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add organvm-iv-taxis/a-i--skills incident-response-commander

For use in Claude.ai and ChatGPT

Download Skill