/install afrexai-incident-response
Incident Response Playbook
Structured incident response for business and IT teams. Guides you through detection, triage, containment, resolution, and post-mortem — with auto-generated timelines and action items.
What It Does
When triggered with an incident description, this skill:
- Classifies severity (P1-P4) based on impact and urgency
- Generates a response checklist tailored to incident type (outage, data breach, security event, service degradation, vendor failure)
- Builds a communication plan — who to notify, when, what channels
- Creates a real-time timeline as you log updates
- Produces a post-mortem template with root cause analysis and prevention steps
Usage
Tell your agent about an incident:
"Production API is returning 500 errors for 20% of requests. Started 10 minutes ago."
Or trigger proactively:
"Create an incident response plan for a potential data breach scenario"
Incident Types Covered
- Service outages — full or partial downtime
- Security incidents — breaches, unauthorized access, phishing
- Data incidents — corruption, loss, privacy violations
- Vendor failures — third-party SLA breaches
- Performance degradation — latency spikes, capacity issues
Severity Matrix
| Level | Impact | Response Time | Escalation |
|---|---|---|---|
| P1 - Critical | Business stopped | Immediate | Executive + all hands |
| P2 - High | Major feature down | \x3C 30 min | Engineering lead + PM |
| P3 - Medium | Degraded experience | \x3C 2 hours | On-call team |
| P4 - Low | Minor issue | Next business day | Ticket queue |
Response Framework
1. Detection & Triage (First 5 minutes)
- Confirm the incident is real (not a false alarm)
- Classify severity using the matrix above
- Assign incident commander
- Open a dedicated communication channel
2. Containment (First 30 minutes)
- Identify blast radius — what's affected?
- Apply immediate mitigation (rollback, feature flag, scaling)
- Communicate status to stakeholders
3. Resolution
- Root cause investigation
- Implement fix with verification
- Monitor for recurrence
- Update all stakeholders
4. Post-Mortem (Within 48 hours)
- Timeline of events
- Root cause analysis (5 Whys)
- What went well / what didn't
- Action items with owners and deadlines
- Process improvements
Integration
Works with any monitoring stack. Feed alerts from PagerDuty, Datadog, Grafana, or manual reports.
Pro Tip
Pair this with a full AI Operations Context Pack for your industry. Pre-built incident taxonomies, compliance-aware escalation paths, and automated stakeholder templates.
Browse packs: https://afrexai-cto.github.io/context-packs/
Free tools:
- AI Revenue Calculator: https://afrexai-cto.github.io/ai-revenue-calculator/
- Agent Setup Wizard: https://afrexai-cto.github.io/agent-setup/
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install afrexai-incident-response - 安装完成后,直接呼叫该 Skill 的名称或使用
/afrexai-incident-response触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
Incident Response Playbook 是什么?
Guides business and IT teams through incident detection, severity classification, containment, resolution, communication, and post-mortem with automated time... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 795 次。
如何安装 Incident Response Playbook?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install afrexai-incident-response」即可一键安装,无需额外配置。
Incident Response Playbook 是免费的吗?
是的,Incident Response Playbook 完全免费(开源免费),可自由下载、安装和使用。
Incident Response Playbook 支持哪些平台?
Incident Response Playbook 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Incident Response Playbook?
由 1kalin(@1kalin)开发并维护,当前版本 v1.0.0。