# Incident Response Skill

> Calm, systematic crisis handling. Use when this capability is needed.

- Skill: `tomevault-io/incident-response-skill` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/incident-response-skill`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/incident-response-skill/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/incident-response-skill

---


# Incident Response Skill

> Calm, systematic crisis handling.

## Severity Levels

| Level | Definition | Response |
| ----- | ---------- | -------- |
| P1 | Service down, all affected | Immediate |
| P2 | Major feature broken | < 1 hour |
| P3 | Feature degraded | < 4 hours |
| P4 | Minor, workaround exists | < 24 hours |

## Response Phases

**Detect** → **Triage** → **Resolve** → **Review**

## Triage Questions

1. User impact?
2. How many affected?
3. Workaround exists?
4. Who owns this?
5. Severity level?

## Resolve Decision

| Question | Action |
| -------- | ------ |
| Can rollback? | Rollback first, debug later |
| Quick fix available? | Deploy hotfix |
| Need investigation? | Enable debug logging, check recent changes |

## Communication

| Audience | Content |
| -------- | ------- |
| Users | Status, ETA |
| Leadership | Impact summary |
| Team | Technical details |

## Post-Mortem Essentials

- Summary (1 paragraph)
- Timeline (what happened when)
- Root cause (5 Whys)
- Action items (owner + due date)

## On-Call Handoff

Active incidents, recent deploys, known issues, pending alerts.

## Synapses

See [synapses.json](synapses.json) for connections.

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/fabioc-aloha) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-15 -->