Triage and respond to production incidents. Use when handling an outage.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Incident Response
Guide the on-call engineer through incident triage, investigation,
and resolution for production issues.
## When to Use This Skill
Use when a PagerDuty alert fires or a user reports a production issue
that needs immediate investigation.
## Implementation Steps
### Step 1: Gather Context
Collect information about the incident:
- Alert source and timestamp
- Affected service and environment
- Error rate and latency changes from monitoring
### Step 2: Investigate
Run diagnostic commands:
```bash
kubectl get pods -n production | grep -v Running
kubectl logs -f deployment/$SERVICE -n production --since=10m
aws cloudwatch get-metric-statistics --namespace Custom --metric-name ErrorRate
```
### Step 3: Identify Root Cause
Correlate findings with recent changes:
```bash
git log --oneline --since="2 hours ago"
kubectl rollout history deployment/$SERVICE -n production
```
### Step 4: Mitigate
If a recent deployment is the cause, roll back:
```bash
kubectl rollout undo deployment/$SERVICE -n production
```
### Step 5: Document
Create an incident report with:
- Timeline of events
- Root cause analysis
- Resolution steps taken
…
The line at the top of this page pins the label v1.2, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
GET https://markdownregistry.com/api/v1/artifacts/art_d3zfizkbqtlntgd6
GET https://markdownregistry.com/api/v1/resolve?ref=stbenjam/skillsaw/incident-response
GET https://markdownregistry.com/api/v1/blob/4d3fefbbb31bd4c615d25b3cec0bf56632cb9ae4693feb014928010c9f7067d0
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
stbenjam/skillsaw · .agents/skills/skillsaw-issue-solver/SKILL.md · Pick up open GitHub issues from collaborators and create PRs to solve them. Use when triaging and resolving reported…
stbenjam/skillsaw · .agents/skills/skillsaw-issue/SKILL.md · Use when skillsaw reports a likely false positive, misses an edge case, behaves incorrectly, or needs an RFE. Gather a…
stbenjam/skillsaw · .agents/skills/skillsaw-lint/SKILL.md · Use when modifying agentic contextual building blocks like skills (SKILL.md), slash commands, agents, hooks, plugins…
stbenjam/skillsaw · .agents/skills/skillsaw-onboard/SKILL.md · Onboard a repository to skillsaw — run the linter, triage the findings by rule, apply autofixes, manually fix what…
stbenjam/skillsaw · .agents/skills/skillsaw-pr-followup/SKILL.md · Follow up on open PRs in skillsaw — fix failing CI, address reviewer feedback, push updates, and validate backward…
stbenjam/skillsaw · .agents/skills/skillsaw-release-ready/SKILL.md · Audit skillsaw for release readiness — test new rules against real repositories, audit core architectural dimensions…
stbenjam/skillsaw · .agents/skills/skillsaw-release/SKILL.md · Bump the version, generate release notes, and publish a new skillsaw release to PyPI. Use when cutting a new release.
cbrock84/headcount · plugins/security/skills/incident-response/SKILL.md · Runs a security incident from detection to closure — triage, containment, investigation, communication, and the review…
rampstackco/claude-skills · skills/incident-response/SKILL.md · Manage active production incidents through detection, triage, mitigation, communication, and resolution with structured…
hypnguyen1209/offensive-claude · skills/incident-response/SKILL.md · Use when responding to or forensically investigating an incident — triage acquisition (Velociraptor/KAPE), Volatility 3…
nahid-sparktales/agent-dispatcher · skills/devops/incident-response/SKILL.md · Stabilize a system that is failing right now — name the signal that flagged it, size the blast radius in numbers, keep…
