Works with the AI tools you already use
Claude Code
Cursor
Codex CLI
Muse
Dots+22 moreClaude CodeCursorCodex CLIMuseDots
OpenClaw
Manus
Grok
Grok Bot+18 agentsIncident Lessons Learned Review
Convert cyber incident evidence into blameless post-mortem reports, root cause analyses, and action trackers.
$10
incident-lessons-learned-review
Example session with this skill installed
Facilitate a post-incident lessons learned review for a business email compromise that occurred last month. Initial access was via a phishing email that bypassed email filtering. Containment took 72 hours. Key stakeholders are the SOC, IT operations, and the CISO. Produce a blameless review report, improvement action tracker, and executive summary.
- Read your context and instructions
- Compiled the incident-lessons-learned-review
The skill produces a structured blameless post-incident review report covering incident scope and timeline, response performance metrics (MTTD, MTTI, MTTC, MTTR), root cause analysis using a five-whys methodology, a blameless review of what went well and what needs improvement, a prioritised improvement action tracker with placeholder owners and due dates, a playbook update requirement list, and a one-page executive summary suitable for CISO or board reporting. All ownership assignments and SLA targets requiring organisational confirmation are clearly marked as placeholders throughout.
Connects securely to your tools. The creator never sees your data.
About this skill
Professional Defensive Post-Incident Reviews
Transform chaotic incident data into structured, actionable intelligence. This skill facilitates deep-dive lessons learned sessions following cyber security incidents, near misses, or tabletop exercises. It moves beyond simple summarization, applying rigorous analysis methods to improve your organization's security posture.
What it does
- Evidence Synthesis: Consolidates incident timelines, logs, and stakeholder inputs into a single source of truth.
- Blameless Analysis: Conducts root cause analysis (RCA) using 5-Whys or Fishbone methods, focusing on systemic improvements rather than individual fault.
- Metric Generation: Calculates key performance indicators like MTTR and MTTC based on provided timestamps.
- Actionable Outputs: Generates executive summaries, playbook update plans, and tracked action items with clear owners and validation criteria.
Why use this skill
Standard AI prompting often yields generic retrospective advice. This skill enforces strict defensive IR standards, ensuring outputs are evidence-based, tool-agnostic (unless specified), and audit-ready. It bridges the gap between technical recovery and executive reporting, ensuring that "lessons learned" actually result in updated playbooks and detection logic.
How to use
Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
30-day refund
Not a fit? Get your money back
Trust & safety
Security scanned
Verified clean 4 months ago
- Passed all security checks, Safe to install
Needs access to
Nist
Mitre
Veriscommunity