Incident Response and SRE skills for Claude Code and Codex
Skills for incidents and reliability: investigating outages, writing blameless postmortems, chaos testing, resilience assessments, disaster recovery and SRE practice on AWS, Azure, Google Cloud and Kubernetes. They give an agent a structured way to work an incident and learn from it.
Highest-scoring incident response skills in the October 22, 2026 snapshot: chaos-engineer from jeffallan/claude-skills (84/100) and mirrord-chaos from metalbear-co/skills (84/100). Scores come from the Suede Skill Check.
- 22 listed skills
- 6 repositories
- 3 with full pages
18 from official publishers. 2 bundle scripts. 0 connect to an outside service. Listed in DevOps and Cloud (20), Testing and QA (1), Security (1).
All 22 incident response skills
No matching skills. Try fewer words or clear your search.
| Skill | Repository | What it does |
|---|---|---|
| chaos-engineer 84/100 · B | jeffallan/claude-skills | Designs chaos experiments and failure injection frameworks and runs game day exercises for distributed systems, producing runbooks, experiment manifests, rollback procedures, and post-mortem templates. |
| devops-engineer 84/100 · B | jeffallan/claude-skills | Creates Dockerfiles, CI/CD pipelines, Kubernetes manifests, and Terraform or Pulumi templates, and handles deployment automation, GitOps configuration, and incident response runbooks. |
| mirrord-chaos 84/100 · B | metalbear-co/skills | Helps chaos test apps with mirrord by injecting artificial latency or connection errors into a session's outgoing traffic using per-session chaos rules. |
| aks-troubleshooting 85/100 · B | microsoft/azure-skills | Debug live Azure Kubernetes Service (AKS) incidents with a read-only, evidence-first investigation. WHEN: pod crashes or Pending, CrashLoopBackOff… |
| aws-cloudwatch-investigation 69/100 · D | github/awesome-copilot | Reusable investigation patterns for AWS CloudWatch: Logs Insights query templates, alarm-to-deployment correlation, blast-radius narrowing decision… |
| aws-resilience-lifecycle 81/100 · B | aws/agent-toolkit-for-aws | Guides the end-to-end AWS resilience lifecycle integrating Resilience Hub v2, Fault Injection Service, and Application Recovery Controller. Covers… |
| azure-kusto-irql 72/100 · C | microsoft/azure-skills | Compose IRQL (Incident Response Query Language) queries for Kusto cybersecurity investigations. Translates natural language hunting questions into… |
| azure-reliability 72/100 · C | microsoft/azure-skills | Assess and improve the reliability posture of PaaS Applications (Azure Functions and Azure App Service). Scans deployed resources for zone… |
| bug-receipt 72/100 · C | github/awesome-copilot | Close defects and incidents with a BUG RECEIPT and VERIFIED, PARTIAL, or BLOCKED status after diagnosis, repair, or recovery. |
| cloud-run-alert-configuration 89/100 · B | google/skills | Configures best-practice, high-signal alerting policies for Cloud Run resources on Google Cloud (services, jobs, and worker pools) based on seasoned… |
| gke-backup-dr 84/100 · B | google/skills | Configures Backup for GKE: the BackupRestore cluster addon, BackupPlan and RestorePlan resources, restore workflows, and CMEK-encrypted backups. Use… |
| gke-reliability 84/100 · B | google/skills | Improves GKE workload reliability, using PDBs, health probes, and topology spread constraints. Use when configuring GKE workload reliability… |
| google-cloud-waf-operational-excellence 80/100 · B | google/skills | Generates operational guidance for CI/CD deployment pipelines, observability, monitoring, logging, and incident management on Google Cloud based on… |
| google-cloud-waf-reliability 80/100 · B | google/skills | Generates guidance for reliability, resilience, availability, redundancy, fault-tolerance, and disaster recovery (DR) for Google Cloud workloads… |
| incident-postmortem 80/100 · B | github/awesome-copilot | Use when an outage, production incident, or significant service degradation has occurred and the team needs to write a structured blameless… |
| investigating-incidents-with-aws-devops-agent 80/100 · B | aws/agent-toolkit-for-aws | Run a deep root-cause investigation on the AWS DevOps Agent. Use when the user describes an incident, alarm, outage, or unexplained behavior —… |
| operate-on-aws 74/100 · C | aws/agent-toolkit-for-aws | Operate a live AWS workload with AWS DevOps Agent — incident investigation, root-cause analysis, and release-readiness review — for startups with no… |
| recovery-controller-setup 70/100 · C | aws/agent-toolkit-for-aws | Configures AWS Application Recovery Controller (ARC) for operational resilience: routing controls with safety rules for cross-Region failover, and… |
| resilience-hub-failure-mode-assessment 77/100 · C | aws/agent-toolkit-for-aws | Runs and interprets AWS Resilience Hub v2 failure mode assessments. Covers starting assessments, understanding findings (severity, categories… |
| resilience-hub-getting-started 77/100 · C | aws/agent-toolkit-for-aws | Sets up AWS Resilience Hub v2 from scratch: creates resilience policies with SLO targets, registers systems and user journeys, onboards services… |
| secops-investigate 84/100 · B | google/skills | Expert guidance for deep security incident and entity investigations in Google SecOps. Use when investigating cases, analyzing entities (hosts, IPs… |
| sre-engineer 84/100 · B | jeffallan/claude-skills | Defines service level objectives, creates error budget policies, designs incident response procedures, develops capacity models, and produces… |
How to choose incident response skills
During an incident, use an investigation skill tied to your platform (AWS DevOps Agent, CloudWatch investigation, AKS troubleshooting); after it, use a postmortem skill so the write-up follows a consistent format.
Investigation skills read logs and metrics with your credentials. Grant read access only, so the agent can gather evidence while people make the changes.
Chaos and resilience skills (chaos engineering, mirrord chaos, Resilience Hub) inject faults on purpose. Run them in staging with a clear stop condition.
Ranked incident response shortlists
Related topics
AWS 151Google Cloud 146Kubernetes 72Azure 78Observability and Monitoring 54CI/CD and DevOps 39Docker and Containers 22Security Auditing and Review 108
Find your next useful skill
Explore Rising Skills with quality scores and source reports, or search from inside your agent.
Get Rising Skills by email · Read Rising Skills · Install the finder · State of Agent Skills