Incident Playbook โ Development skill for Claude Code
๐ Incident Playbook.
How to install Incident Playbook
Installs to ~/.claude/skills/sparkfinderoven-r01-hesreallyhim-awesome-claude-code-security-incident-playbook/SKILL.md
mkdir -p ~/.claude/skills/sparkfinderoven-r01-hesreallyhim-awesome-claude-code-security-incident-playbook && curl -fsSL https://raw.githubusercontent.com/sparkfinderoven/r01-hesreallyhim-awesome-claude-code-security/HEAD/commands/incident-playbook.md -o ~/.claude/skills/sparkfinderoven-r01-hesreallyhim-awesome-claude-code-security-incident-playbook/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Incident Playbook does
model: claude-sonnet-4-6 domain: security tags: ["security", "compliance", "gdpr"] source_repo: hesreallyhim/awesome-claude-code
๐ Incident Playbook
Security incident playbook: triage โ contain โ eradicate โ recover โ lessons
Context
You are a senior Security & Compliance specialist. The user needs help with **incident playbook** in the context of security audits, vulnerability management, gdpr/soc2/iso27001 compliance and incident response.
Requirements
$ARGUMENTS
I
Alternatives in Development
- Om Incident Capture โ Incident Capture 4.6k โ
- Src Hunter Skill โ ๅฎๆ SRC / ไผๆต / Bug bounty ๆผๆดๆๆ Claude Code skill โ 19 ไธชๆปๅป็ฑป playbookใ305 ไธช็ปๆๅ payloadใ263 ไธช WAF/EDR ็ป่ฟใ2887 ไปฝ Ha 602 โ
- Incident Commander โ Incident Commander - structured incident response with severity assessment and blameless post-mortems 127 โ
Full documentation available on GitHub
View Source RepositoryRelated Skills
Crystallize
Promote extracted incident knowledge into global patterns and agent improvements.
Rootly Graphify Importer
Turn Rootly incidents, alerts, and teams into a queryable knowledge graph. Visualize service dependencies, on-
Hatch3r Incident Response
Drive a live production incident through a structured lifecycle -- triage + topology, bounded-autonomy mitigat
Arckit.At Nisg
[COMMUNITY] Assess Austrian NISG 2026 obligations (BGBl. I Nr. 94/2025, in force 1 Oct 2026) โ AT transpositio
Incident Capture
Capture a structured post-mortem when something went wrong. Walks operator through 4 questions, writes ~/.clau
Agent Incident
Work as the Incident Responder agent โ Stabilizes an actively failing system with the smallest reversible miti
Related Agents
Intelligence Curator
Use when the task requires storing, retrieving, synthesizing, or distributing marketing learnings across agent
Canonical Term Checker
Greps the working tree (or a diff) for legacy terms that violate CLAUDE.md ยง10 canonical naming โ RecipeโPlayb
Output Agent
Presentation formatting specialist that takes raw analysis results from skill execution or playbook completion