CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

incident-runbook-templates

Production-ready templates for incident response runbooks covering detection, triage, mitigation, resolution, and communication.

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/incident-runbook-templates/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A dense, genuinely actionable template library with concrete commands, verification steps, and escalation guidance throughout — the actionability is the standout strength. Weaknesses are structural: the body is a ~380-line monolith whose only external reference is a dangling path, and generic instruction boilerplate dilutes an otherwise lean document.

Suggestions

Fix or remove the dangling reference to resources/implementation-playbook.md, which does not exist in the bundle — either create the file or drop the pointer.

Split the two full templates into reference files (e.g., templates/service-outage.md, templates/database-incident.md) and keep SKILL.md as a short overview with well-signaled one-level-deep links, cutting the main body to well under 100 lines.

Delete the generic 'Instructions' filler ('Clarify goals, constraints, and required inputs', 'Apply relevant best practices and validate outcomes') and replace it with the actual workflow for assembling a service-specific runbook from these templates, including how to resolve the $DB_HOST/$DB_USER placeholders and the referenced-but-missing helper scripts.

DimensionReasoningScore

Conciseness

The bulk of the ~380-line body is lean, high-value template content — severity tables, kubectl/psql commands, escalation matrices, comms templates — with no explanation of concepts Claude already knows. What keeps it below anchor 5 is generic filler: the 'Instructions' bullets ('Clarify goals, constraints, and required inputs. Apply relevant best practices and validate outcomes.') and the boilerplate 'Do not use this skill when' section are vague padding that earns no tokens, plus a doubled code fence artifact around the Resolution Notification template.

4 / 5

Actionability

The templates are overwhelmingly concrete and executable: specific kubectl commands ('kubectl rollout undo deployment/payment-service -n payments'), real SQL against pg_stat_activity, exact alert thresholds ('payment_error_rate > 5%'), and a full NetworkPolicy YAML. It falls short of anchor 5's copy-paste-ready bar due to minor gaps: undefined env vars ($DB_HOST, $DB_USER), helper scripts that exist nowhere in the bundle (./scripts/db-rollback.sh, ./scripts/smoke-test-payments.sh), and a company-internal feature-flag endpoint.

4 / 5

Workflow Clarity

Sequences are clear with checkpoints in the right places: an initial-triage classification table routing symptoms to numbered mitigation sections, per-step 'Verify recovery'/'rollout status' checks, a dedicated Verification Steps block before Rollback Procedures, and a 9-part runbook structure. Validation is present for the destructive operations (pg_terminate_backend, rollout undo, VACUUM FULL) so the destructive-ops cap does not apply; it sits below anchor 5 only because the skill's own meta-workflow for assembling a custom runbook from these templates is left implicit in the vague 'Instructions' section.

4 / 5

Progressive Disclosure

The body has decent section structure but no bundle exists, and its one external pointer — 'If detailed examples are required, open resources/implementation-playbook.md' — references a file that does not exist in the bundle (no resources/ directory). Both full templates (~230 and ~60 lines) are inlined in SKILL.md when they are prime candidates for separate reference files, matching anchor 3's 'content that should be separate is inline' with a buried, broken reference.

3 / 5

Total

15

/

20

Passed

Description

70%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A focused, domain-specific description with good trigger vocabulary and clear lifecycle coverage, but it omits any explicit 'use when' guidance, which caps completeness and leaves trigger conditions to inference. Adding a trigger clause naming natural user phrases (outage, on-call, SEV, postmortem) would lift it to excellent.

Suggestions

Append an explicit trigger clause, e.g. 'Use when creating or updating incident response runbooks, on-call procedures, or escalation matrices, or when the user mentions outages, SEVs, postmortems, or incident management.'

Swap the marketing phrase 'Production-ready' for another concrete capability (e.g., 'with communication and escalation templates') since buzzwords add no trigger value.

Include common user synonyms such as 'on-call', 'outage playbooks', and 'postmortems' to broaden natural trigger coverage.

DimensionReasoningScore

Specificity

The description lists concrete coverage areas — 'detection, triage, mitigation, resolution, and communication' — beyond just naming the domain, though these are lifecycle phases rather than distinct actions, keeping it just below anchor 5's 'multiple specific concrete actions'. It is well above anchor 3 ('1-2 concrete actions, not comprehensive') given five enumerated coverage areas, and 'Production-ready' is mild marketing padding rather than a concrete capability.

4 / 5

Completeness

The 'what' is clear — templates for incident response runbooks covering the full lifecycle — but there is no 'Use when...' clause or any equivalent explicit trigger guidance, which per the judging guidelines caps completeness at 3. It is not a 4 because the 'when' is entirely absent rather than merely under-specified.

3 / 5

Trigger Term Quality

Strong natural keywords are present: 'incident response', 'runbooks', 'detection', 'triage', 'mitigation', 'escalation-adjacent' terms like 'resolution' and 'communication'. Common variations users would actually say — 'on-call', 'outage', 'SEV', 'postmortem', 'service degradation' — are missing, matching anchor 4's 'good keyword coverage; a few natural terms missing' rather than the comprehensive synonym coverage of anchor 5.

4 / 5

Distinctiveness Conflict Risk

The incident-response/runbook niche is clearly staked out with distinct domain triggers ('incident response', 'runbooks', named lifecycle phases), giving minimal overlap risk with other skills. The triggers are specific enough that it would not fire for general document or writing tasks.

5 / 5

Total

16

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

15

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

skills/incident-runbook-templates/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.