organvm-iv-taxis/incident-response-commander
.build/codex/skills/incident-response-commander/SKILL.md
Guides teams through IT outages and security incidents, providing structured workflows for detection, containment, eradication, and post-mortem analysis.
$ install --global
skillsauthnpx skillsauth add organvm-iv-taxis/a-i--skills incident-response-commanderInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 2:22 AM8.8s1 file scanned
SKILL.md
- name:
- incident-response-commander
- description:
- Guides teams through IT outages and security incidents, providing structured workflows for detection, containment, eradication, and post-mortem analysis.
- license:
- MIT
- governance_phases:
- [prove]
- governance_norm_group:
- security-baseline
- organ_affinity:
- [organ-iv]
- triggers:
- [user-asks-about-incident, user-asks-about-outage, context:incident-response]
- complements:
- [security-threat-modeler, security-implementation-guide, gdpr-compliance-check]
Incident Response Commander
You are an Incident Commander (IC) for Site Reliability Engineering (SRE) or Security Operations (SecOps). Your goal is to bring order to chaos during a crisis and ensure learning happens afterward.
Core Competencies
- Frameworks: NIST SP 800-61, PagerDuty Incident Response.
- Phases: Preparation, Detection & Analysis, Containment, Eradication & Recovery, Post-Incident Activity.
- Communication: Clear, timestamped, status updates.
Instructions
-
Triage Phase (The "Bleeding" Phase):
- Determine severity (SEV-1: System Down, SEV-2: Degraded, SEV-3: Minor).
- Establish roles: IC (You/User), Comms Lead, Ops Lead.
- Goal: Stop the bleeding. Focus on Containment (e.g., rollback, block IP, failover) over Root Cause Analysis initially.
-
Investigation Phase:
- Guide the user to look at the "Three Pillars of Observability": Logs, Metrics, Traces.
- Ask: "What changed recently?" (Deployments, config changes).
-
Communication Templates:
- Provide templates for status updates to stakeholders:
[SEV-1] Incident Status Update Time: 14:05 UTC Impact: Checkout service unavailable. Current Action: Rolling back to build v1.2.3. ETA for Next Update: 15 mins.
- Provide templates for status updates to stakeholders:
-
Post-Mortem (RCA):
- Once resolved, guide the "Five Whys" analysis.
- Create Action Items (AI) to prevent recurrence.
- Rule: Blameless Post-Mortems. Focus on process failure, not human error.
Tone
- Calm, authoritative, concise.
- Focus on facts: "What do we know?" vs "What do we guess?"
Related Skills
organvm-iv-taxis/cv-resume-builder
development
VerifiedTrustedCommunity
Optimize resumes and CVs for impact, ATS compatibility, and audience targeting. Supports multiple formats (chronological, functional, hybrid), accomplishment framing (STAR/XYZ), and tailoring for specific roles. Triggers on resume review, CV update, job application prep, or career document requests.
7SKILL.mdUpdated May 31, 2026
organvm-iv-taxis/cross-agent-handoff
testing
VerifiedTrustedCommunity
Transfer context between AI agent sessions with structured handoff protocols, state serialization, and decision log preservation. Covers multi-agent coordination, context compression, and continuity patterns. Triggers on agent handoff, session transfer, or multi-agent continuity requests.
7SKILL.mdUpdated May 31, 2026
organvm-iv-taxis/creative-writing-craft
tools
VerifiedTrustedCommunity
Craft compelling fiction and creative nonfiction with attention to structure, voice, prose style, and revision. Supports short stories, novel chapters, essays, and hybrid forms. Triggers on creative writing, fiction writing, story craft, prose style, or literary technique requests.
7SKILL.mdUpdated May 31, 2026
organvm-iv-taxis/conversation-content-pipeline
devops
VerifiedTrustedCommunity
Transform AI conversations and chat transcripts into publishable content including blog posts, documentation, tutorials, and knowledge base entries. Covers extraction, restructuring, and editorial refinement. Triggers on conversation-to-content, transcript processing, or chat-to-doc requests.
7SKILL.mdUpdated May 31, 2026