CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

incident-responder

Expert SRE incident responder specializing in rapid problem resolution, modern observability, and comprehensive incident management.

Quality

49%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/incident-responder/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

31%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body lays out a well-sequenced incident-response lifecycle, but it is a ~184-line knowledge dump of standard SRE concepts Claude already knows, with no executable commands, templates, or validation feedback loops, and its only reference to detail material points to a nonexistent file. It needs drastic pruning toward environment-specific guidance plus a working reference structure.

Suggestions

Cut the known-concept sections (severity taxonomy, error budgets, reliability patterns, post-mortem theory) and keep only what Claude wouldn't already know: organization-specific escalation paths, runbook locations, tool configurations, and communication templates.

Replace tool name-drops with executable specifics: actual commands (e.g. 'kubectl rollout undo deployment/<name>'), status-page update templates, and concrete first-5-minutes triage steps.

Fix the dangling 'resources/implementation-playbook.md' reference (the file is absent from the bundle) and split detail material — severity matrix, tools, post-incident checklists — into one-level-deep reference files with clearly signaled links.

DimensionReasoningScore

Conciseness

The ~184-line body restates standard SRE knowledge Claude already has — 'Error budgets', 'Circuit breakers', 'Bulkhead pattern', 'Blameless Post-Mortem', 'Five whys, fishbone diagrams', MTTR/MTTD, and a P0-P3/SEV1-4 severity taxonomy — plus padded persona sections ('Behavioral Traits', 'Response Principles', a 'Purpose' section repeating the description) and a vacuous 'Use this skill when... Working on incident responder tasks' section, matching anchor 2 ('Noticeably verbose; several unnecessary explanations or padded sections'). Not 1 because the material is organized as scannable checklists rather than tutorial prose and includes some genuinely useful operational parameters (SLA targets, 15-minute update cadence); not 3 because the majority of the body is known-concept restatement and persona padding with no environment-specific knowledge added.

2 / 5

Actionability

There are no commands, code, or templates anywhere — bullets are concept-plus-gloss pairs like '**Distributed tracing**: OpenTelemetry, Jaeger, Zipkin for request flow analysis' and '**PagerDuty**: Alerting, escalation, response coordination'; concrete specifics are limited to SLA numbers ('< 15 minutes acknowledgment') and update cadences, matching anchor 2 ('Minimal concrete guidance; high-level hints but missing the specific steps to execute'). Not 3 because even the fix workflow stops at concept level ('Rollback assessment: Recent deployments' with no actual rollback command or procedure) and the only pointer to executable detail ('open `resources/implementation-playbook.md`') targets a file that does not exist in the bundle; not 1 because the phase structure and specific SLA/cadence numbers do provide some concrete guidance.

2 / 5

Workflow Clarity

A clear macro-sequence exists — 'Immediate Actions (First 5 minutes)' through investigation, communication, 'Resolution & Recovery', and 'Post-Incident' — including a numbered fix sequence ('1. Minimal viable fix... 4. Validation') and recovery validation criteria ('All SLIs back to normal thresholds'), matching anchor 3 ('Steps listed but validation gaps; sequence present but checkpoints missing or implicit'). Not 4 because there are no explicit gates or feedback loops (nothing says what to do if validation fails, e.g. roll back the fix and re-assess) and the many bullet considerations within each phase are unordered; not 2 because the phases are well-sequenced with time markers and validation steps are at least named.

3 / 5

Progressive Disclosure

The entire skill is one 184-line file with no bundle files at all (no references/, scripts/, assets/, or resources/ directories exist), inlining material that belongs in separate reference files (severity/SLA matrix, tool inventories, post-incident checklists), and the single cross-file pointer — 'If detailed examples are required, open `resources/implementation-playbook.md`' — is buried in a bullet and references a file that does not exist, matching anchor 2 ('Minimal structure; content that clearly belongs in separate files is inlined; or references are buried'). Not 1 because the body has clear, navigable section headers rather than an unstructured wall; not 3 because the situation is worse than 'references present but not clearly signaled' — the one reference is dangling, so navigation to detail material actually fails.

2 / 5

Total

9

/

20

Passed

Description

45%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description names a clear domain in third person but reads as a persona/competency claim rather than a capability statement: no concrete actions, no 'use when' trigger guidance, and buzzword padding ('Expert', 'modern', 'comprehensive'). It would be substantially improved by action-oriented phrasing and an explicit trigger clause with natural synonyms.

Suggestions

Replace buzzword competency claims with concrete actions, e.g. 'Assesses incident severity and impact, establishes incident command, drives stabilization and rollback, coordinates stakeholder communications, and runs blameless post-mortems.'

Add an explicit trigger clause, e.g. 'Use when responding to production incidents or outages, when on-call during a SEV/P0 event, or when preparing post-incident reviews.'

Include natural trigger synonyms users actually say: 'outage', 'on-call', 'SEV1', 'production issue', 'post-mortem'.

DimensionReasoningScore

Specificity

The description names the domain ('Expert SRE incident responder') but contains no concrete action verbs — 'rapid problem resolution', 'modern observability', and 'comprehensive incident management' are competency themes padded with buzzwords ('Expert', 'modern', 'comprehensive'), matching anchor 2 ('Names the domain but actions are minimal or generic', e.g. 'Processes PDF files'). Not 3 because anchor 3 requires 1-2 concrete actions and this has none; not 1 because the SRE incident-response domain is named distinctly rather than being entirely vague.

2 / 5

Completeness

A clear 'what' is stated (SRE incident response specializing in rapid resolution, observability, incident management) but the 'when' is entirely absent — there is no 'Use when...' clause or equivalent trigger guidance, exactly matching anchor 3 ('Has a clear what but when is missing or only weakly implied') and the guideline capping completeness at 3. Not 4/5 because no trigger guidance exists at all; not 2 because the 'what' is specific about the domain and focus areas, not vague like 'Use when working with documents'.

3 / 5

Trigger Term Quality

'incident' (in 'incident responder' and 'incident management'), 'SRE', and 'observability' are natural keywords a user would say, but common variations are missing — 'outage', 'on-call', 'SEV', 'production down', 'post-mortem' — matching anchor 3 ('Some relevant keywords but missing common variations or synonyms'). Not 4 because more than 'a few' natural use-case terms are absent; not 2 because the central, highly natural keyword 'incident' is present, unlike the generic 'Works with files'.

3 / 5

Distinctiveness Conflict Risk

The SRE incident-response identity is somewhat specific, but broad hooks like 'rapid problem resolution' and 'modern observability' create overlap with general debugging/troubleshooting and monitoring/observability skills, and with no explicit triggers the distinction rests only on the incident/SRE identity — matching anchor 3 ('Somewhat specific but could still overlap with similar skills'). Not 4 because those two broad phrases are more than minor overlap surfaces with closely related skills; not 2 because 'SRE incident responder' is far more specific than 'Helps with document files'.

3 / 5

Total

11

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

skills/incident-responder/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.