incident-response plugins

by Intent Solutions IO

Comprehensive operations manager for FairDB managed PostgreSQL service - SOPs, incident response, monitoring, and automation

by Intent Solutions IO

Comprehensive operations manager for FairDB managed PostgreSQL service - SOPs, incident response, monitoring, and automation

by Intent Solutions IO

Comprehensive operations manager for FairDB managed PostgreSQL service - SOPs, incident response, monitoring, and automation

by Aient

Bring Aient's AI operations layer into Codex: inspect production telemetry, triage problems, manage remediation, and move from alerts to reviewable fixes.

by Matt Corbett

Blue-team DFIR / SOC team — agents (dfir-response-lead, detection-and-forensics-engineer) for running a security incident end to end: the incident lifecycle per NIST SP 800-61r3 (CSF 2.0-aligned; supersedes r2; 4 phases: preparation -> detection & analysis -> containment/eradication/recovery -> post-incident), triage & severity classification, containment strategy, breach coordination + comms + regulatory notification (GDPR 72h), tabletops; and detection engineering (SIEM/Sigma rules mapped to MITRE ATT&CK, alert tuning), hypothesis-driven threat hunting, evidence acquisition & forensics (order of volatility per RFC 3227, chain of custody), and malware triage. skills, a knowledge bank with two Mermaid decision trees + a dated 2026 DFIR tooling map, best-practices, templates, an advisory hook. Seams: appsec/secure-coding -> security-engineering; governance/risk/audit -> cybersecurity-grc; reliability incidents -> observability-sre; platform abuse -> trust-and-safety. Requires ravenclaude-core@>=0.7.0.

by Matt Corbett

Observability & SRE team — agents (observability-engineer, sre-reliability-engineer, incident-commander) for making a system observable and keeping it reliable: instrumentation on OpenTelemetry (metrics/logs/traces, semantic conventions, sampling, cardinality control), SLI/SLO and error-budget design, symptom-based alerting (multi-window burn-rate, alert on user pain not causes), incident response (severity, roles, comms, blameless postmortems, action-item follow-through), and proactive resilience verification via chaos engineering (steady-state hypotheses, blast-radius-limited fault injection, game days). skills, a decision-tree knowledge bank (alert-design + SLO-target trees + a chaos-engineering reference + a dated 2026 tooling map), best-practices, templates, commands, an advisory hook. Seams: deploy health-gates -> devops-cicd, cluster telemetry -> cloud-native-kubernetes, API SLOs -> api-engineering, cloud-native monitors -> azure/aws/gcp-cloud. Requires ravenclaude-core@>=0.7.0.

by Paulo Soares

Framework de DevOps com postura de execução segura — leitura livre, mutação sob confirmação por comando, destrutivo bloqueado. 24 skills cobrindo AWS, Kubernetes, Docker, Linux, Nginx, PostgreSQL, observabilidade, incidente, segurança, Proxmox, automação, performance, backup, Laravel, confiabilidade, FinOps, infraestrutura de IA, quality gates e documentação contínua. 4 subagentes e guard script como segunda barreira.

by Kamil Kuklewski

Find your rung on the Steps of AI Adoption and the next one up. Blank-sheet discovery of this machine and repo, scored against Boris Cherny's adoption ladder, plus a scope interview and phased plan for unattended agents, and an incident-response loop that earns the next rung.

by Opsphere

DevOps and SRE intelligence for ChatGPT Codex — investigate incidents, search Datadog logs, diagnose CI/CD pipelines, check deployments, and operate across AWS, Kubernetes, GitHub, Jira, Sentry, Cloudflare, and more through a secure remote MCP gateway.

by Wagner Ignacio Pinto Junior

Write a production-incident postmortem that reads well for humans and stays parseable by tooling: machine-read frontmatter, a numbered spine, and strict evidence rules