Stats
Actions
Tags
'%20stop-opacity%3D'0.16'%2F%3E%3Cstop%20offset%3D'1'%20stop-color%3D'rgb(200%2C90%2C60)'%20stop-opacity%3D'0.03'%2F%3E%3C%2FlinearGradient%3E%3C%2Fdefs%3E%3Crect%20width%3D'320'%20height%3D'200'%20fill%3D'url(%23g)'%2F%3E%3Ccircle%20cx%3D'250'%20cy%3D'56'%20r%3D'92'%20fill%3D'rgb(200%2C90%2C60)'%20fill-opacity%3D'0.06'%2F%3E%3Ccircle%20cx%3D'64'%20cy%3D'172'%20r%3D'58'%20fill%3D'rgb(200%2C90%2C60)'%20fill-opacity%3D'0.05'%2F%3E%3C%2Fsvg%3E)
From incident-response
Conduct post-incident review and document findings, root causes, and preventive measures.
How this command is triggered — by the user, by Claude, or both
Slash command
/incident-response:write-postmortem incident summary or investigation reportThe summary Claude sees in its command listing — used to decide when to auto-load this command
# Write Postmortem Command Chain these steps: 1. Use `root-cause-analysis-security` to finalize root cause analysis 2. Use `lessons-learned` to conduct post-incident review with team 3. Identify systemic improvements and prevention strategies 4. Document findings and preventive actions with accountability and timelines Deliverables: - Post-incident review (postmortem) report with timeline - Root cause analysis with contributing factors - Lessons learned: what went well, what didn't, what to improve - Preventive action plan with owners and timelines - Metrics: MTTR, recovery time, busine...
Chain these steps:
root-cause-analysis-security to finalize root cause analysislessons-learned to conduct post-incident review with teamDeliverables:
After completion, suggest follow-up commands: respond-to-incident, investigate-breach.
npx claudepluginhub sethdford/claude-skills --plugin security-incident-response/write-postmortemComprehensive postmortem with timeline, RCA, prevention, and action items.
/incidentManages incident response: classifies SEV1-4 severity, builds timelines with evidence, performs 5 Whys root cause analysis, generates blameless post-mortems with action items and metrics. Outputs Markdown docs and git commits.
/post-incident-reviewTransform an incident into systemic improvements across all teams.
/incidentGuides incident response from detection through triage, mitigation, and resolution, then produces a structured post-mortem document. Supports severity flags and direct incident descriptions for rapid triage.
/postmortemDrafts a blameless postmortem for a given incident by ID/name or the most recent significant incident within a time window, reconstructing timeline and root cause from connected incident management tools.
/incident-reporterCreates structured incident reports with root cause analysis, timeline tracking, and action item management for post-mortem documentation.