Incident Response

When you're in the middle of an incident and need to coordinate response, this handles the structured parts so you can focus on actually fixing things. It helps you create incident channels, track status updates, manage communication with stakeholders, and generate postmortems. The workflow automation is useful if your team doesn't already have a dedicated incident management platform or if you want something more flexible than Slack workflows alone. It won't replace your on-call tooling, but it fills the gap between "something's on fire" and "here's what we learned," which is where a lot of teams just end up with scattered docs and missed follow-ups.

skills.sh installs: 648
GitHub stars: 29.5K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add alirezarezvani/claude-skills --skill incident-response --agent claude-code

Installs into .claude/skills of the current project.

Files

Incident Response

Incident response skill for the full lifecycle from initial triage through forensic collection, severity declaration, and escalation routing. This is NOT threat hunting (see threat-detection) or post-incident compliance mapping (see governance/compliance-mapping) — this is about classifying, triaging, and managing declared security incidents.