CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

incident-response-incident-response

Coordinate production incident triage, mitigation, investigation, recovery, and follow-up. Use when responding to outages or other incidents that require structured operational coordination.

60

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/incident-response-incident-response/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

56%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body delivers a well-sequenced five-phase incident-response workflow with concrete per-step agent prompts, outputs, and context handoffs, but it is undermined by template cruft: doubled-domain boilerplate sections, generic filler instructions, a leaked Extended-thinking bracket, and an unresolved $ARGUMENTS placeholder at the end. It is also a monolithic single file with no progressive disclosure despite having plenty of material (13 prompt recipes) that belongs in reference files.

Suggestions

Delete the template filler: the 'Use this skill when / Do not use this skill when' sections with the doubled phrase 'incident response incident response', the generic 'Instructions' bullets, the '[Extended thinking: ...]' bracket, and the stray trailing line 'Production incident requiring immediate response: $ARGUMENTS' — none of them add guidance Claude does not already have.

Resolve or define the '$ARGUMENTS' placeholder used throughout the prompts (and the undefined '$SEVERITY' in step 3), either by explaining how to substitute the user's incident description or by replacing it with explicit input instructions.

Move the 13 detailed agent-prompt recipes into reference files (e.g., references/phases.md or per-phase files) linked from a concise SKILL.md overview, so the main file stays a navigable summary rather than a monolithic 167-line wall.

DimensionReasoningScore

Conciseness

Multiple padded sections are present: the doubled template boilerplate "Working on incident response incident response tasks", generic filler like "Clarify goals, constraints, and required inputs. Apply relevant best practices and validate outcomes.", the leaked "[Extended thinking: ...]" bracket explaining SRE concepts Claude already knows, and the stray trailing line "Production incident requiring immediate response: $ARGUMENTS". This matches anchor 2 (several unnecessary explanations or padded sections); anchor 3 would require the waste to be limited to isolated spots rather than recurring sections.

2 / 5

Actionability

Each of the 13 steps specifies a concrete subagent type, an enumerated prompt, expected output, and context handoff (e.g., "Use Task tool with subagent_type=\"incident-responder\"" with a fully written prompt), which is mostly executable guidance per anchor 4. It falls short of anchor 5 because prompts contain unresolved "$ARGUMENTS" placeholders and reference subagent types of dubious availability (e.g., "content-marketing::content-marketer"), making them not copy-paste ready; it exceeds anchor 3's pseudocode-level guidance.

4 / 5

Workflow Clarity

The five phases (Detection & Triage through Postmortem & Prevention) are clearly sequenced, "Context:" lines wire each step's outputs into the next step, and step 8 includes checkpoints ("Health check validation at each stage", "Rollback triggers configured"), matching anchor 4. It is not anchor 5 because there are no explicit validate-before-proceeding gates or feedback loops between phases, and not anchor 3 because most checkpoints and handoffs are explicitly stated.

4 / 5

Progressive Disclosure

No bundle files (references/, scripts/, assets/) exist; all 13 detailed agent-prompt recipes are inlined in a 167-line body. Header-based phase structure is clear, but nothing is offloaded to reference files, matching anchor 3 (structure present, content that should be separate is inline). It is not anchor 4 (nothing is placed in separate files) nor anchor 2 (organization and sectioning are clear, not minimal).

3 / 5

Total

13

/

20

Passed

Description

83%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description: it states the domain, the incident lifecycle actions it coordinates, and an explicit 'Use when' trigger clause in third person, mirroring the reference good examples. Its only weaknesses are phase-level rather than operation-level action specificity and some missing natural trigger synonyms.

DimensionReasoningScore

Specificity

"Coordinate production incident triage, mitigation, investigation, recovery, and follow-up" lists several specific actions spanning the incident lifecycle, but they are canonical phase names rather than concrete operations, leaving minor gaps in coverage (anchor 4). It exceeds anchor 3 (only 1-2 actions) but falls short of anchor 5's fully concrete operational detail.

4 / 5

Completeness

The description explicitly answers both what ("Coordinate production incident triage, mitigation, investigation, recovery, and follow-up") and when ("Use when responding to outages or other incidents that require structured operational coordination") with concrete trigger phrases, matching anchor 5. Anchor 4 would apply only if the when-clause were less explicit.

5 / 5

Trigger Term Quality

Natural keywords "outages", "incidents", and "production incident" give good trigger coverage, matching anchor 4. Common variations users say are missing (e.g., "downtime", "SEV", "on-call", "service disruption"), so it does not reach anchor 5's comprehensive synonym coverage, while anchor 3 would understate the present coverage.

4 / 5

Distinctiveness Conflict Risk

Incident response coordination is a clear niche, but "outages" and "incidents" have minor overlap risk with adjacent observability, debugging, or security-incident skills (anchor 4). It is more distinct than anchor 3's generic phrasing but not the minimal-conflict niche of anchor 5.

4 / 5

Total

17

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

rmyndharis/antigravity-skills

Path

skills/incident-response-incident-response/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.