incident-response SKILL.md skillA

incident-response from nanaagyei/noetherkin is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add nanaagyei/noetherkin/incident-response@git:20260923.02eeb8a

Pins git:20260923.02eeb8a in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
nanaagyei/noetherkin
Path
skills/incident-response/SKILL.md
Versions recorded
3
Latest version
git:20260923.02eeb8a, committed Sep 23, 2026
First version recorded
Sep 18, 2026
Size
1,810 bytes
Repository stars
6
License
Apache-2.0

Facilitate or review a safely bounded Noetherkin incident exercise. Use for diagnosis, mitigation, communication, and learning, never to claim real production experience.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Incident response

Read [runtime limits](references/runtime.md), [your contract](references/contract-incident-response.md), and [assistance rules](references/assistance-model.md).

Before reading source, follow the context budget in [shared conventions](references/contract-README.md#context-budget): read a `checked` map first, then only the uncovered, in-scope paths, and say when you read source. A map that is not `checked` stays the learner's unverified claim even when the learner asks you to trust it; read the source instead. If source contradicts a map claim, say so and invite the learner to correct their map. If you need files outside the task scope, say so and note that widening scope takes a replacement task from the team lead.

1. Confirm the predeclared scenario, simulated/real label, safe environment, stop conditions, exact artifact revision, and permitted actions. External or destructive actions need separate explicit authorization.
2. Preserve a timestamped known timeline. Ask the learner to predict effects before a diagnostic or mitigation; record failed actions and assistance rather than cleaning up the story.
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add nanaagyei/noetherkin/incident-response@sha256:9fe9e9ea0a3f2969

The line at the top of this page pins the label git:20260923.02eeb8a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_axy4ykh3qz2az5ea.svg)](https://markdownregistry.com/a/art_axy4ykh3qz2az5ea)

4 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 3 versions of this file, between Sep 18, 2026 and Sep 23, 2026, about one every 3 days.

versioncommittedcommitsizeaudit
git:20260923.02eeb8a latest2026-09-23 02eeb8a 1,810 BA view · diff
git:20260923.487b4c12026-09-23 487b4c1 1,466 BA view · diff
git:20260918.5eb7b142026-09-18 5eb7b14 1,246 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (1810 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

nanaagyei/noetherkin · 6 stars · license Apache-2.0 · pushed 2026-10-31 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_axy4ykh3qz2az5ea
GET https://markdownregistry.com/api/v1/resolve?ref=nanaagyei/noetherkin/incident-response
GET https://markdownregistry.com/api/v1/blob/9fe9e9ea0a3f29694fbe3e429287dd8c6d38d55ba6407f00c3563a23b5762bb5

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from nanaagyei/noetherkin

AGENTS.md AGENTS.md file
nanaagyei/noetherkin · AGENTS.md
git:20260918.5eb7b14 · audit A · 6 stars
AGENTS.md@archive/protocol-1.0 AGENTS.md file
nanaagyei/noetherkin · archive/protocol-1.0/AGENTS.md
git:20260918.5eb7b14 · audit A · 6 stars
architecture SKILL.md skill
nanaagyei/noetherkin · skills/architecture/SKILL.md · Analyze Noetherkin system boundaries and architectural trade-offs from source-cited facts. Use for architecture…
git:20260923.02eeb8a · audit A · 6 stars
benchmarks SKILL.md skill
nanaagyei/noetherkin · skills/benchmarks/SKILL.md · Design and interpret reproducible Noetherkin benchmarks with controlled workloads and raw results. Use for performance…
git:20260923.02eeb8a · audit A · 6 stars
code-review SKILL.md skill
nanaagyei/noetherkin · skills/code-review/SKILL.md · Review one identified Noetherkin change revision for correctness, risk and maintainability against task criteria and…
git:20260923.02eeb8a · audit A · 6 stars
codebase-map SKILL.md skill
nanaagyei/noetherkin · skills/codebase-map/SKILL.md · Guide a Noetherkin learner in creating or checking a source-cited codebase map. Use for orientation and request-path…
git:20260923.02eeb8a · audit A · 6 stars
debug SKILL.md skill
nanaagyei/noetherkin · skills/debug/SKILL.md · Debug a Noetherkin failure with hypotheses, predictions, and discriminating experiments. Use for causal investigation…
git:20260923.02eeb8a · audit A · 6 stars
design-review SKILL.md skill
nanaagyei/noetherkin · skills/design-review/SKILL.md · Review an exact learner-authored Noetherkin design revision against its frozen task. Use for the team-lead design gate…
git:20260923.02eeb8a · audit A · 6 stars
manager SKILL.md skill
nanaagyei/noetherkin · skills/manager/SKILL.md · Coordinate Noetherkin manager synthesis and next-scope recommendations. Prefer performance-review or…
git:20260918.5eb7b14 · audit A · 6 stars
onboarding SKILL.md skill
nanaagyei/noetherkin · skills/onboarding/SKILL.md · Introduce a Noetherkin workspace, gather learner goals and constraints, and resume pending onboarding with a baseline…
git:20260929.37abe71 · audit A · 6 stars
peer-engineer SKILL.md skill
nanaagyei/noetherkin · skills/peer-engineer/SKILL.md · Collaborate broadly with a Noetherkin learner on an investigation or interpreting a run. Use as the peer workflow…
git:20260923.02eeb8a · audit A · 6 stars
performance-improvement-plan SKILL.md skill
nanaagyei/noetherkin · skills/performance-improvement-plan/SKILL.md · Create an evidence-linked Noetherkin learning recovery plan. Use for bounded growth support, explicitly not workplace…
git:20260918.5eb7b14 · audit A · 6 stars

Every file in nanaagyei/noetherkin

Other files named incident-response

incident-response SKILL.md skill
cbrock84/headcount · plugins/security/skills/incident-response/SKILL.md · Runs a security incident from detection to closure — triage, containment, investigation, communication, and the review…
git:20260916.0e7cd01 · audit A · 2,543 stars
incident-response SKILL.md skill
rampstackco/claude-skills · skills/incident-response/SKILL.md · Manage active production incidents through detection, triage, mitigation, communication, and resolution with structured…
git:20260810.e5bc675 · audit A · 1,037 stars
incident-response SKILL.md skill
hypnguyen1209/offensive-claude · skills/incident-response/SKILL.md · Use when responding to or forensically investigating an incident — triage acquisition (Velociraptor/KAPE), Volatility 3…
git:20260630.df7d895 · audit A · 410 stars
incident-response SKILL.md skill
harness/harness-skills · skills/observability-governance/incident-response/SKILL.md · Incident response and analysis via Harness MCP. Correlate incidents with recent deployments, assess blast radius and…
v1.0.0 · audit A · 131 stars
incident-response SKILL.md skill
miosa-osa/osa · priv/skills/incident-response/SKILL.md · Investigate suspected compromise, preserve incident evidence, build a timeline and plan containment, recovery and…
v1.0.200 · audit A · 78 stars
incident-response SKILL.md skill
stbenjam/skillsaw · tests/fixtures/apm/clean/.apm/skills/incident-response/SKILL.md · Triage and respond to production incidents. Use when handling an outage.
v1.2 · audit A · 69 stars
incident-response SKILL.md skill
nahid-sparktales/agent-dispatcher · skills/devops/incident-response/SKILL.md · Stabilize a system that is failing right now — name the signal that flagged it, size the blast radius in numbers, keep…
git:20260919.a0d4f55 · audit A · 58 stars
incident-response SKILL.md skill
drafthq/draft · skills/incident-response/SKILL.md · Incident management lifecycle — triage, communicate, mitigate, postmortem. Three modes — new (start incident), update…
git:20260819.fda278e · audit A · 40 stars

Browse by kind, by grade A, or by owner.