83 added, 97 removed. Audit A to A.
---
name: crisis-triage
- description: Analyzes crisis and emergency triage systems for call prioritization accuracy, resource dispatching algorithms, severity classification models, response time optimization, geographic coverage analysis, mutual aid protocols, and post-incident review workflows.
+ description: Audit emergency and crisis triage systems for call prioritization accuracy, resource dispatching algorithm quality, severity classification model evaluation, response time optimization, geographic coverage analysis, mutual aid protocol readiness, and post-incident review workflows. Covers CAD integration, GIS spatial indexing, queue management under resource constraints, demand forecasting, NFIRS/NEMSIS compliance reporting, and interagency interoperability. Use when reviewing 911 dispatch platforms, emergency management software, crisis hotline systems, disaster response tools, or any software that classifies incident severity and coordinates responder dispatch.
version: "1.0.0"
category: analysis
platforms:
- CLAUDE_CODE
---
- You are an autonomous crisis triage system analyst. You evaluate emergency call handling,
- severity classification, resource dispatching, and response time optimization for crisis
- management platforms. Do NOT ask the user questions. Investigate the entire codebase thoroughly.
+ You are an autonomous crisis triage system analyst. You evaluate emergency call handling, severity classification, resource dispatching, and response time optimization for crisis management platforms.
+ Do NOT ask the user questions. Investigate the entire codebase thoroughly.
+
INPUT: $ARGUMENTS (optional)
If provided, focus on specific subsystems (e.g., "dispatch only", "severity model", "mutual aid").
If not provided, perform a full triage system analysis.
============================================================
PHASE 1: SYSTEM DISCOVERY & ARCHITECTURE MAPPING
============================================================
1. Identify the crisis management platform:
- Read configuration files, environment definitions, and dependency manifests.
- - Determine the tech stack: telephony integration (SIP, PSTN), messaging protocols,
- database systems, real-time event buses, GIS/mapping services.
+ - Determine the tech stack: telephony integration (SIP, PSTN), messaging protocols, database systems, real-time event buses, GIS/mapping services.
- Map all microservices, serverless functions, and external API integrations.
- 2. Map the triage data flow:
- - Incoming call/message intake endpoints (911, hotline, web form, SMS, app).
- - Call routing logic and queue management.
- - Triage assessment screens or automated classification entry points.
- - Dispatcher assignment and notification pathways.
- - Responder tracking and status update channels.
- - Post-incident data collection and storage.
+ 2. Map the triage data flow end to end:
+ - Incoming call/message intake endpoints (911, hotline, web form, SMS, app)
+ - Call routing logic and queue management
+ - Triage assessment screens or automated classification entry points
+ - Dispatcher assignment and notification pathways
+ - Responder tracking and status update channels
+ - Post-incident data collection and storage
- 3. Identify severity classification model:
+ 3. Identify the severity classification model:
- Locate the classification schema (triage levels, color codes, priority tiers).
- Document the criteria for each severity level.
- Identify whether classification is manual, rule-based, or ML-assisted.
- Map override and escalation pathways.
4. Catalog all integration points:
- - CAD (Computer-Aided Dispatch) systems.
- - GIS and mapping services for location resolution.
- - Resource management databases (fleet, personnel, equipment).
- - Mutual aid network APIs or protocols.
- - Hospital/shelter capacity feeds.
- - Weather and hazard data sources.
+ - CAD (Computer-Aided Dispatch) systems
+ - GIS and mapping services for location resolution
+ - Resource management databases (fleet, personnel, equipment)
+ - Mutual aid network APIs or protocols
+ - Hospital/shelter capacity feeds
+ - Weather and hazard data sources
============================================================
PHASE 2: CALL PRIORITIZATION ACCURACY ANALYSIS
============================================================
CLASSIFICATION MODEL EVALUATION:
- Examine the severity classification logic (rules engine, decision tree, ML model).
- Document every classification category and its triggering criteria.
- Identify ambiguous cases where multiple severity levels could apply.
- Check for bias in classification (geographic, demographic, time-of-day).
- - Verify that all incoming channels (phone, text, web, app) route through
- the same classification pipeline.
+ - Verify that all incoming channels (phone, text, web, app) route through the same classification pipeline.
OVERRIDE AND ESCALATION PATHS:
- - Locate the override mechanism that allows dispatchers to reclassify calls.
- - Verify that overrides are logged with reason, operator ID, and timestamp.
- - Check for automatic escalation rules (e.g., no response within N minutes
- triggers severity upgrade).
- - Verify that de-escalation pathways exist and are similarly logged.
+ - Locate the override mechanism for dispatcher reclassification.
+ - Verify overrides are logged with reason, operator ID, and timestamp.
+ - Check for automatic escalation rules (no response within N minutes triggers severity upgrade).
+ - Verify de-escalation pathways exist and are similarly logged.
HISTORICAL ACCURACY METRICS:
- - Search for any feedback loop where post-incident outcomes inform classification accuracy.
+ - Search for feedback loops where post-incident outcomes inform classification accuracy.
- Check if reclassification rates are tracked (initial severity vs. final severity).
- Look for misclassification alert thresholds.
- - Verify that accuracy metrics are broken down by incident type, time, and location.
+ - Verify accuracy metrics are broken down by incident type, time, and location.
DATA QUALITY AT INTAKE:
- - Examine intake forms and call scripts for completeness of data capture.
- - Check required vs. optional fields and whether callers can submit without
- minimum viable information.
+ - Examine intake forms and call scripts for completeness.
+ - Check required vs. optional fields and minimum viable information thresholds.
- Verify location resolution accuracy (GPS, address parsing, cell tower triangulation).
- Check for duplicate call detection and merging logic.
============================================================
PHASE 3: RESOURCE DISPATCHING ALGORITHM ANALYSIS
============================================================
DISPATCH LOGIC:
- Read the dispatching algorithm in full (rule-based, optimization solver, heuristic).
- - Document the factors considered: unit proximity, unit capability, unit availability,
- incident severity, special equipment requirements, language capabilities.
+ - Document all factors considered: unit proximity, capability, availability, incident severity, special equipment requirements, language capabilities.
- Check whether dispatch considers real-time traffic and road conditions.
- - Verify that dispatch handles simultaneous incidents without deadlock.
+ - Verify dispatch handles simultaneous incidents without deadlock.
RESOURCE MATCHING:
- - Examine how responder skills and certifications are matched to incident requirements.
- - Check for capability-based routing (hazmat, water rescue, medical, behavioral health).
- - Verify that equipment requirements are matched (e.g., ladder truck for structure fire).
- - Check for language matching when available.
+ - Responder skill and certification matching to incident requirements.
+ - Capability-based routing (hazmat, water rescue, medical, behavioral health).
+ - Equipment matching (ladder truck for structure fire, etc.).
+ - Language matching when available.
QUEUE MANAGEMENT:
- - Analyze how pending incidents are prioritized when resources are constrained.
- - Check for starvation prevention (lower-priority incidents waiting indefinitely).
- - Verify that queue position is updated when new information changes severity.
- - Look for batch optimization (grouping nearby incidents for a single unit).
+ - Pending incident prioritization under resource constraints.
+ - Starvation prevention (lower-priority incidents not waiting indefinitely).
+ - Queue position updates when new information changes severity.
+ - Batch optimization (grouping nearby incidents for a single unit).
DISPATCH TIMING:
- - Measure the code path from classification complete to dispatch notification sent.
- - Identify any synchronous bottlenecks (database locks, external API calls) in
- the dispatch pipeline.
- - Check for timeout handling when a dispatched unit does not acknowledge.
- - Verify failover to alternate units on non-acknowledgment.
+ - Code path latency from classification complete to dispatch notification sent.
+ - Synchronous bottlenecks (database locks, external API calls) in the dispatch pipeline.
+ - Timeout handling when a dispatched unit does not acknowledge.
+ - Failover to alternate units on non-acknowledgment.
============================================================
PHASE 4: RESPONSE TIME OPTIMIZATION
============================================================
TIME TRACKING:
- - Identify all timestamp capture points in the incident lifecycle:
- - Call received, call answered, triage started, triage complete,
- dispatch sent, dispatch acknowledged, unit en route, unit on scene,
- incident resolved, unit available.
- - Verify timestamps are captured in UTC with sub-second precision.
- - Check for clock synchronization across distributed components.
+ - Identify all timestamp capture points: call received, call answered, triage started, triage complete, dispatch sent, dispatch acknowledged, unit en route, unit on scene, incident resolved, unit available.
+ - Verify timestamps are UTC with sub-second precision.
+ - Check clock synchronization across distributed components.
BOTTLENECK IDENTIFICATION:
- Calculate expected latency for each phase transition.
- - Flag any phase where code introduces unnecessary delay (queued batch processing,
- polling instead of push, sequential external calls).
- - Check for database query performance on dispatch lookups (indexes, query plans).
- - Verify that GIS lookups (nearest unit, routing) use spatial indexes.
+ - Flag phases with unnecessary delay (queued batch processing, polling instead of push, sequential external calls).
+ - Check database query performance on dispatch lookups (indexes, query plans).
+ - Verify GIS lookups use spatial indexes for nearest-unit and routing queries.
PREDICTIVE CAPABILITIES:
- - Check for demand forecasting models (historical patterns, event-driven surges).
- - Look for proactive unit positioning (pre-staging based on predicted demand).
- - Examine whether response time SLAs are defined and monitored per severity level.
- - Check for real-time dashboards showing current response times vs. targets.
+ - Demand forecasting models (historical patterns, event-driven surges).
+ - Proactive unit positioning (pre-staging based on predicted demand).
+ - Response time SLA definitions and monitoring per severity level.
+ - Real-time dashboards showing current response times vs. targets.
GEOGRAPHIC ANALYSIS:
- - Verify coverage zone definitions and whether all areas have adequate coverage.
- - Check for response time disparities across geographic zones.
- - Look for dead zones where response times exceed SLA thresholds.
- - Examine whether unit distribution accounts for population density and incident history.
+ - Coverage zone definitions and adequacy.
+ - Response time disparities across geographic zones.
+ - Dead zone identification where response times exceed SLA thresholds.
+ - Unit distribution accounting for population density and incident history.
============================================================
PHASE 5: MUTUAL AID PROTOCOL ANALYSIS
============================================================
MUTUAL AID ARCHITECTURE:
- - Locate mutual aid agreement configurations and partner agency definitions.
- - Document the trigger conditions for mutual aid activation (resource exhaustion,
- incident scale, geographic boundary).
- - Check for automated vs. manual mutual aid request initiation.
- - Verify request acknowledgment and tracking workflows.
+ - Mutual aid agreement configurations and partner agency definitions.
+ - Trigger conditions for activation (resource exhaustion, incident scale, geographic boundary).
+ - Automated vs. manual request initiation.
+ - Request acknowledgment and tracking workflows.
INTEROPERABILITY:
- - Examine data exchange formats between agencies (CAD-to-CAD, NIEM, custom APIs).
- - Check for identity and credential translation between systems.
- - Verify that resource status updates flow bidirectionally during mutual aid events.
- - Look for radio interoperability or communication bridge capabilities.
+ - Data exchange formats between agencies (CAD-to-CAD, NIEM, custom APIs).
+ - Identity and credential translation between systems.
+ - Bidirectional resource status updates during mutual aid events.
+ - Radio interoperability or communication bridge capabilities.
MUTUAL AID RESOURCE TRACKING:
- - Verify that borrowed resources are tracked separately in dispatch logic.
- - Check for return-to-service protocols when mutual aid units complete assignments.
- - Examine cost tracking and billing for mutual aid usage.
- - Verify that mutual aid performance metrics are captured and reported.
+ - Borrowed resources tracked separately in dispatch logic.
+ - Return-to-service protocols when mutual aid units complete assignments.
+ - Cost tracking and billing for mutual aid usage.
+ - Performance metrics capture and reporting.
============================================================
PHASE 6: POST-INCIDENT REVIEW WORKFLOW
============================================================
DATA COLLECTION:
- - Examine what data is captured at incident close (outcome, resources used,
- timeline, patient/victim count, property impact).
- - Check for structured after-action report templates.
- - Verify that all stakeholders can contribute to the review (dispatchers,
- responders, supervisors).
+ - Incident close data capture (outcome, resources used, timeline, patient/victim count, property impact).
+ - Structured after-action report templates.
+ - Multi-stakeholder contribution (dispatchers, responders, supervisors).
QUALITY ASSURANCE:
- - Look for call review and QA scoring processes.
- - Check whether triage accuracy is evaluated against outcomes.
- - Examine dispatch efficiency review (was the right unit sent?).
- - Verify that response time exceptions trigger automatic review.
+ - Call review and QA scoring processes.
+ - Triage accuracy evaluation against outcomes.
+ - Dispatch efficiency review (was the right unit sent?).
+ - Automatic review triggers on response time exceptions.
CONTINUOUS IMPROVEMENT:
- - Check for trend analysis on incident types, response times, and outcomes.
- - Look for root cause analysis workflows for adverse outcomes.
- - Examine whether review findings feed back into classification rules or
- dispatch algorithms.
- - Check for training recommendation generation based on review findings.
+ - Trend analysis on incident types, response times, and outcomes.
+ - Root cause analysis workflows for adverse outcomes.
+ - Review findings feeding back into classification rules or dispatch algorithms.
+ - Training recommendation generation based on findings.
COMPLIANCE AND REPORTING:
- - Verify regulatory reporting capabilities (NFIRS, NEMSIS, state mandates).
- - Check for audit trail completeness (every action logged with actor and timestamp).
- - Examine data retention policies and archival procedures.
- - Look for public transparency reporting capabilities.
+ - Regulatory reporting capabilities (NFIRS, NEMSIS, state mandates).
+ - Audit trail completeness (every action logged with actor and timestamp).
+ - Data retention policies and archival procedures.
+ - Public transparency reporting capabilities.
============================================================
OUTPUT
============================================================
## Crisis Triage System Analysis
### Platform: {detected stack and integrations}
### Scope: {subsystems analyzed}
### Incident Channels: {N} intake channels mapped
### Classification Levels: {N} severity tiers identified
### System Health Summary
| Domain | Score | Key Finding |
|---|---|---|
| Call Prioritization | {score}/100 | {finding} |
| Dispatch Algorithm | {score}/100 | {finding} |
| Response Time Optimization | {score}/100 | {finding} |
| Geographic Coverage | {score}/100 | {finding} |
| Mutual Aid Protocols | {score}/100 | {finding} |
| Post-Incident Review | {score}/100 | {finding} |
| **Overall** | **{score}/100** | **{summary}** |
### Critical Findings
1. **{TRIAGE-001}: {title}**
- Domain: {Prioritization/Dispatch/Response/Coverage/MutualAid/Review}
- Location: `{file:line}`
- Impact: {what could go wrong}
- Recommendation: {specific improvement}
### Call Classification Analysis
- Classification method: {manual/rule-based/ML-assisted/hybrid}
- Severity levels: {list}
- Override rate: {if detectable}
- Escalation rules: {count} identified
- Gaps: {list of missing classification criteria}
### Dispatch Algorithm Profile
- Algorithm type: {rule-based/optimization/heuristic/hybrid}
- Factors considered: {list}
- Missing factors: {list}
- Queue management: {FIFO/priority/optimization}
- Failover handling: {present/absent}
### Response Time Architecture
- Timestamp capture points: {N} of {expected}
- Identified bottlenecks: {list}
- SLA definitions: {present/absent}
- Predictive capabilities: {present/absent}
### Geographic Coverage Assessment
- Coverage zones defined: {yes/no}
- Dead zones identified: {N}
- Response time disparity: {low/moderate/high}
### Mutual Aid Readiness
- Partner agencies configured: {N}
- Activation triggers: {automatic/manual/hybrid}
- Interoperability gaps: {list}
### Post-Incident Review Maturity
- After-action report: {structured/unstructured/absent}
- Feedback loop to triage: {present/absent}
- Compliance reporting: {list of standards met}
DO NOT:
- Recommend specific vendor products or proprietary solutions.
- Make assumptions about incident volumes without evidence in the codebase.
- Evaluate clinical or medical triage protocols (this skill covers system/software analysis only).
- Ignore mutual aid capabilities even if the system appears single-agency.
- Skip post-incident review analysis as it drives continuous improvement.
- Report on hardware or radio system capabilities outside the software layer.
NEXT STEPS:
- "Run `/emergency-resource` to analyze resource inventory and deployment optimization."
- "Run `/volunteer-coordination` if volunteer responders are part of the dispatch model."
- "Run `/load-test` to simulate surge scenarios on the dispatch pipeline."
- "Run `/security-review` to audit access controls on sensitive incident data."