Ops

incident-response

by DevOps-Security-Agent-Skills

Handle security incidents with IR playbooks and procedures. Implement detection, containment, eradication, and recovery processes. Use when responding to security events or building incident response capabilities.

v1.0.0New

Unsigned, install at your own risk

Unverified

This skill has no cryptographic signature attached. We can't verify the contents match what the publisher intended.

Install this skill

Run this command in your terminal. No account required — it auto-detects your AI tool and installs the skill file.

npx @skills-hub-ai/cli install devops-security-agent-skills-incident-response
Or download directly:
Browse all CLI commands →

Setup by platform

Claude Code

~/.claude/skills/<skill>/SKILL.md

Setup guide →

Install

One-click setup for your editor

Run in your project root

npx @skills-hub-ai/cli install devops-security-agent-skills-incident-response --target claude-code
0

Instructions

This skill doesn’t include stateful context yet, instructions only. Learn about stateful skills.

Security

Loading security scan...

Reviews (0)

View full changelog & diffs →

Related skills

Browse all →
aws-s3Configure S3 buckets, policies, and lifecycle rules. Implement versioning, replication, and security. Use when managing object storage on AWS.0 installsbackup-recoveryImplement backup and recovery strategies. Configure rsync, Restic, and cloud backups. Use when designing data protection solutions.0 installsjenkinsCreate and manage Jenkins CI/CD pipelines, configure agents, manage plugins, and automate builds. Use when working with Jenkins servers, creating Jenkinsfiles, or setting up build automation for enterprise environments.0 installscloudflare-r2Manage Cloudflare R2 buckets, lifecycle, and signed URLs. Use for low-egress object storage and media delivery.0 installschange-managementImplement change management processes. Configure CAB reviews, change windows, and rollback procedures. Use when managing production changes.0 installssops-encryptionEncrypt files and configs with Mozilla SOPS. Integrate with AWS KMS, GCP KMS, or PGP for key management. Use when encrypting configuration files, Kubernetes secrets, or implementing GitOps with encrypted secrets.0 installs

More from DevOps-Security-Agent-Skills

View source →
model-registry-governanceEstablish model registry standards, governance controls, metadata schemas, approvals, and lifecycle policies for enterprise AI deployments.0 installsaws-cost-optimizationReduce AWS spend with rightsizing, autoscaling, commitment planning, and storage lifecycle policies. Use when running FinOps reviews, lowering cloud bills, or improving cost-per-request metrics.0 installsazure-sqlProvision Azure SQL Database and Cosmos DB. Configure security, backups, and replication. Use when deploying managed databases on Azure.0 installsmac-mini-llm-labConfigure a Mac mini as a reliable local LLM server with remote access, observability, and power-safe operation. Use when building an always-on private AI inference server on Apple Silicon.0 installsopenclaw-local-mac-miniSet up OpenClaw locally and run it reliably on a Mac mini for private, always-on local agent workflows.0 installshipaa-complianceImplement HIPAA security and privacy rules. Configure PHI protections and BAA requirements. Use when handling healthcare data.0 installs

More Ops skills

Browse category →
rate-limitingAdd rate limiting to APIs — configure per-user and per-IP limits, sliding window algorithms, tiered quotas, retry-after headers, and progressive abuse detection.6 installsdebug-production-incidentStructured triage → mitigation → root-cause flow for live production incidents. Use when a running system is degraded or down (errors, latency, outages) and you need to restore service safely and then find the cause.4 installscachingImplement caching strategy — add HTTP cache headers, in-memory TTL caches, Redis caching layer, cache invalidation patterns, and cache warming for hot paths.2 installscost-optimization-finopsBuild a defensible cloud cost-reduction plan without hurting reliability or velocity. Use when cloud spend is rising, before/after a scaling event, or during a FinOps review of AWS/GCP/Azure usage.1 installsmodel-resilience-auditScans your codebase for hardcoded AI model references, identifies context-window assumption violations, assesses fallback coverage, and generates a compliance-risk report with a one-file model rotation config. Run after any model suspension event or before adopting a new frontier model.1 installspenetration-testingPerform basic penetration testing and security assessments. Use reconnaissance, vulnerability discovery, and exploitation techniques. Use when validating security controls or assessing system security.0 installs

Frequently asked questions about incident-response

What does the incident-response skill do?

Handle security incidents with IR playbooks and procedures. Implement detection, containment, eradication, and recovery processes. Use when responding to security events or building incident response capabilities. It's a reusable SKILL.md instruction set that loads into your AI coding assistant on demand, no prompt engineering, no copy-pasting every session.

How do I install the incident-response skill?

Run `npx @skills-hub-ai/cli install devops-security-agent-skills-incident-response` from your terminal. The CLI writes the SKILL.md to the correct location for your AI tool (e.g. ~/.claude/skills/devops-security-agent-skills-incident-response/ for Claude Code or ~/.cursor/skills/ for Cursor with --target cursor) and adds it to your project's .skills.json lockfile.

Which AI tools does incident-response work with?

incident-response runs in Claude Code. It follows the open Agent Skills standard (SKILL.md), so the same skill works in every supported tool without modification.

Is the incident-response skill free?

Yes. Every skill on skills-hub.ai is free and open-source. There are no premium tiers, paywalls, or usage limits. You only pay for whatever AI assistant you're already using.

How do I use incident-response after installing it?

In Claude Code, type `/devops-security-agent-skills-incident-response` (or whatever slash command the skill registers) and the AI follows the skill's instructions immediately. You can also reference it by name in natural language, your AI loads the skill into context when relevant.

Can I share the incident-response skill with my team?

Yes. Commit your project's .skills.json lockfile and teammates run `npx @skills-hub-ai/cli install` (no args) to install every skill at the exact version you pinned. Organization-scoped installs work via skills-hub.ai organizations.