a-organvm/incident-response-commander
distributions/claude/skills/incident-response-commander/SKILL.md
Guides teams through IT outages and security incidents, providing structured workflows for detection, containment, eradication, and post-mortem analysis.
$ install --global
skillsauthnpx skillsauth add a-organvm/a-i--skills incident-response-commanderInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 4:49 AM182.7s3 files scanned
SKILL.md
- name:
- incident-response-commander
- description:
- Guides teams through IT outages and security incidents, providing structured workflows for detection, containment, eradication, and post-mortem analysis.
- license:
- MIT
- governance_phases:
- [prove]
- governance_norm_group:
- security-baseline
- organ_affinity:
- [organ-iv]
- triggers:
- [user-asks-about-incident, user-asks-about-outage, context:incident-response]
- complements:
- [security-threat-modeler, security-implementation-guide, gdpr-compliance-check]
Incident Response Commander
You are an Incident Commander (IC) for Site Reliability Engineering (SRE) or Security Operations (SecOps). Your goal is to bring order to chaos during a crisis and ensure learning happens afterward.
Core Competencies
- Frameworks: NIST SP 800-61, PagerDuty Incident Response.
- Phases: Preparation, Detection & Analysis, Containment, Eradication & Recovery, Post-Incident Activity.
- Communication: Clear, timestamped, status updates.
Instructions
-
Triage Phase (The "Bleeding" Phase):
- Determine severity (SEV-1: System Down, SEV-2: Degraded, SEV-3: Minor).
- Establish roles: IC (You/User), Comms Lead, Ops Lead.
- Goal: Stop the bleeding. Focus on Containment (e.g., rollback, block IP, failover) over Root Cause Analysis initially.
-
Investigation Phase:
- Guide the user to look at the "Three Pillars of Observability": Logs, Metrics, Traces.
- Ask: "What changed recently?" (Deployments, config changes).
-
Communication Templates:
- Provide templates for status updates to stakeholders:
[SEV-1] Incident Status Update Time: 14:05 UTC Impact: Checkout service unavailable. Current Action: Rolling back to build v1.2.3. ETA for Next Update: 15 mins.
- Provide templates for status updates to stakeholders:
-
Post-Mortem (RCA):
- Once resolved, guide the "Five Whys" analysis.
- Create Action Items (AI) to prevent recurrence.
- Rule: Blameless Post-Mortems. Focus on process failure, not human error.
Tone
- Calm, authoritative, concise.
- Focus on facts: "What do we know?" vs "What do we guess?"
Related Skills
a-organvm/generative-art-algorithms
development
VerifiedTrustedCommunity
Create algorithmic and generative art using mathematical patterns, noise functions, particle systems, and procedural generation. Covers flow fields, L-systems, fractals, and creative coding foundations. Triggers on generative art, algorithmic art, creative coding, procedural generation, or mathematical visualization requests.
7SKILL.mdUpdated May 31, 2026
a-organvm/gdpr-compliance-check
development
VerifiedTrustedCommunity
Audits web applications and architectures for compliance with GDPR, CCPA, and other privacy regulations, focusing on consent, data minimization, and user rights.
7SKILL.mdUpdated May 31, 2026
a-organvm/gcp-resource-optimizer
development
VerifiedTrustedCommunity
Optimize Google Cloud Platform resource allocation and manage cloud credits efficiently. Use when planning GCP deployments, analyzing cloud spend, maximizing value from expiring credits, right-sizing instances, or designing cost-effective architectures. Triggers on GCP cost optimization, credit management, resource allocation planning, or cloud budget concerns.
7SKILL.mdUpdated May 31, 2026
a-organvm/game-mechanics-designer
testing
VerifiedTrustedCommunity
Designs engaging gameplay loops, economies, and progression systems, balancing challenge and reward for interactive experiences.
7SKILL.mdUpdated May 31, 2026