CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

incident-response-incident-response

Use when working with incident response incident response

Quality

49%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Low

Low-risk findings worth noting

Fix and improve this skill with Tessl

tessl review fix ./skills/incident-response-incident-response/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

38%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body presents a well-ordered multi-phase incident-response orchestration plan, but it is undermined by templated boilerplate, non-executable prompt templates relying on undefined agent types and variables, absent validation/decision gates for high-stakes production changes, and a monolithic single-file layout whose lone reference is broken. It reads as an auto-generated workflow template rather than operational guidance.

Suggestions

Replace the placeholder agent orchestration with executable guidance: either define how the referenced subagents are created/loaded, or restructure as direct instructions with concrete commands (e.g., actual kubectl rollback, feature-flag, or status-page API calls) instead of $ARGUMENTS prompt templates.

Add explicit validation gates between phases — e.g., 'verify SLO recovery and health checks pass before declaring the incident resolved; if deployment health checks fail, execute rollback and re-enter Phase 2' — turning the implied checkpoints into feedback loops.

Move the 13 per-step prompt templates, severity/incident-type configuration, and coordination protocols into actual reference files under references/ (and fix or remove the nonexistent resources/implementation-playbook.md path), keeping SKILL.md as a lean overview with clearly signaled links.

DimensionReasoningScore

Conciseness

The body carries substantial padding: boilerplate 'Use this skill when / Do not use this skill when' sections that duplicate the frontmatter, generic instructions ('Clarify goals, constraints, and required inputs'), explanations of concepts Claude already knows (severity-level definitions, what war rooms and postmortems are), and a dangling final line 'Production incident requiring immediate response: $ARGUMENTS'. This matches 'Noticeably verbose; several unnecessary explanations or padded sections' rather than the mostly-efficient score-3 anchor.

2 / 5

Actionability

Each step includes a concrete Task-tool prompt template, which is specific guidance, but none of it is executable as written: the prompts depend on undefined variables ($ARGUMENTS, $SEVERITY) and subagent types that do not exist in any known agent registry ('incident-responder', 'observability-monitoring::observability-engineer', 'error-debugging::debugger'). This matches 'Some concrete guidance but incomplete; pseudocode instead of executable code' — above the score-2 anchor because the prompts are detailed, below score-4 because key details (how to create/locate these agents) are missing.

3 / 5

Workflow Clarity

The 5-phase, 13-step sequence is clearly ordered with per-step context handoffs and success criteria, but validation checkpoints are implied rather than explicit — there are no decision gates such as 'if health checks fail after rollout, roll back and re-verify' or criteria for advancing between phases. Given the workflow involves production deployments and rollbacks, the missing feedback loops cap this at 'Steps listed but validation gaps; sequence present but checkpoints missing or implicit'.

3 / 5

Progressive Disclosure

Thirteen detailed agent-prompt blocks, configuration tables, and coordination protocols are all inlined in a single ~170-line SKILL.md — content that clearly belongs in separate reference files — and the only external reference, 'resources/implementation-playbook.md', points to a file that does not exist in the bundle (there is no resources/ directory). This matches 'Minimal structure... content that clearly belongs in separate files is inlined; or references are buried'; it does not reach score 3 because no working reference navigation exists at all.

2 / 5

Total

10

/

20

Passed

Description

36%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description provides only a trigger ('Use when working with incident response') with a duplicated domain phrase and no capability statement. It fails to answer 'what does this skill do' entirely, and its keyword coverage is limited to the bare domain term with no synonyms or related incident vocabulary.

Suggestions

Add a capability statement in third person before the trigger, e.g. 'Orchestrates multi-agent incident response: triage, mitigation, root-cause analysis, fix deployment, stakeholder communication, and blameless postmortems.'

Expand trigger terms with natural synonyms users actually say, such as 'outage', 'SEV', 'production incident', 'downtime', 'on-call', or 'postmortem', to answer both what and when in one sentence.

Remove the duplicated phrase 'incident response incident response', which reads as a templating error and adds no distinguishing information.

DimensionReasoningScore

Specificity

The description names the domain ("incident response") but lists no actions whatsoever — there is no 'what this skill does' content. It matches the anchor 'Names the domain but actions are minimal or generic' rather than the score-1 anchor, since the domain is explicitly named rather than pure abstraction.

2 / 5

Completeness

Only the 'when' is present ("Use when working with...") with no statement of what the skill does — an exact match for the anchor-2 example 'Use when working with documents'. It cannot score 3 because the 'what' is entirely missing, not merely weakly implied.

2 / 5

Trigger Term Quality

"incident response" is a natural phrase users would say, matching 'Some relevant keywords but missing common variations or synonyms' — terms like outage, SEV, downtime, on-call, postmortem, or pager are absent. It is above the score-2 anchor because the keyword is relevant and domain-specific, not generic.

3 / 5

Distinctiveness Conflict Risk

"incident response" is a real niche domain, so it is somewhat specific and distinguishable from generic skills, but the description offers nothing that differentiates this particular skill (multi-agent orchestration, postmortems, monitoring) from any other incident-response skill — matching 'Somewhat specific but could still overlap with similar skills'.

3 / 5

Total

10

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

skills/incident-response-incident-response/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.