- Home
- Skills
- DevOps & Cloud
- Incident Postmortem Skill
Works with the AI Agents you already use
Incident Postmortem Skill
Transform raw incident logs and notes into structured, blameless postmortems and actionable prevention plans.
$9.99
Incident Postmortem Skill
Example session with this skill installed
Generate a postmortem for incident #402. Services: API Gateway. Detected: 14:02 UTC via Datadog. Resolved: 14:45 UTC. Cause: Bad config deploy at 13:55 UTC. Impact: 15% 5xx errors for US-East users.
- Read your context and instructions
- Compiled the incident postmortem
I have processed the incident data for #402 and generated a structured, blameless postmortem focused on the API Gateway failure.
Incident Postmortem: #402 API Gateway 5xx Errors
1. Executive Summary
On 2023-10-12, the API Gateway experienced a partial outage affecting users in the US-East region. The incident lasted 43 minutes, triggered by a configuration deployment. Resolution was achieved by rolling back the affected configuration.
2. Impact
- Affected System: API Gateway / US-East Region.
- User Impact: Approximately 15% of requests returned 5xx status codes.
- Duration: 14:02 UTC to 14:45 UTC (43 minutes).
3. Timeline
| Timestamp | Event | Source |
|---|---|---|
| 13:55 UTC | Configuration deployment initiated | Deploy Logs |
| 14:02 UTC | Spike in 5xx errors; Datadog alert triggers | Datadog |
| 14:10 UTC | Engineering team acknowledges alert; investigation begins | Incident Notes |
| 14:30 UTC | Root cause identified as invalid gateway routing config | Incident Notes |
| 14:40 UTC | Rollback to previous stable config initiated | Deploy Logs |
| 14:45 UTC | Error rates return to baseline; incident resolved | Datadog |
4. Root Cause
The primary cause was an invalid routing configuration deployed to the API Gateway. The configuration change contained a syntax error that passed basic validation but failed during high-concurrency traffic routing in the production environment.
5. Action Items
-
Action: Implement automated integration tests for routing logic in CI/CD.
-
Priority: High
-
Reason: Prevent syntax or logic errors from reaching production.
-
Verification: CI pipeline must pass new 'gateway-routing' test suite.
-
Action: Review Datadog alert thresholds for earlier detection.
-
Priority: Medium
-
Reason: 7-minute gap between deployment and alert trigger.
Next steps
- Assign the CI/CD integration test task to the DevOps squad.
- Conduct a technical review of the failed configuration file to update the linter rules.
- Schedule a 15-minute sync to discuss the detection lag.
Connects securely to your tools. The creator never sees your data.
About this skill
Writing postmortems after a production outage is a tedious, high-stakes task that often falls to exhausted engineers. This skill converts messy incident notes, Slack logs, and monitoring alerts into structured, blameless documentation. It removes the friction of formatting and categorization while ensuring the final report focuses on systemic improvements rather than human error.
What it does
- Evidence synthesis transforms raw logs and timestamps into a cohesive narrative.
- Root cause isolation distinguishes between triggers, contributing factors, and core systemic weaknesses.
- Impact quantification summarizes affected services and customer symptoms based strictly on provided data.
- Blameless analysis reframes errors as process or tooling gaps to maintain engineering culture.
- Actionable remediation generates prioritized tasks for prevention and verification.
How it works
- Provide the raw incident data, including timestamps, log snippets, and response notes.
- The skill analyzes the sequence of events to build a chronological timeline.
- It categorizes detection gaps, response delays, and technical failures.
- Review the structured report, action items, and identified prevention plans.
Frameworks & tools
This skill is framework-agnostic and works with data from PagerDuty, Jira, Datadog, Slack, and AWS CloudWatch logs.
Why this beats prompting it yourself
Generic prompts often hallucinate root causes or use judgmental language that damages team morale. This skill enforces a strict blameless methodology and clearly labels missing information instead of filling gaps with fabrications.
Use cases
- Drafting official SRE postmortems after a high-severity production outage.
- Summarizing internal incident response for weekly engineering leadership reviews.
- Converting chaotic Slack incident channel logs into a structured knowledge base.
Known limitations
This skill cannot access live systems to pull logs directly. It relies entirely on the text provided by the user and will not invent missing timestamps or owners.
Requires manual input of logs/notes. Does not integrate with live monitoring APIs. Will not fabricate missing data points like timestamps or owners.
How to use
- 1
Connect your agent to the Agensi MCP
Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup
- 2
Sign in to Agensi
Your agent shows a sign-in link. Sign in and click Allow.
- 3
Ask for what you need
Your agent loads this skill and uses it on your task. It always asks before any payment.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill goes through the trust checks below.
Security scanned
Checked by our 8-point scan before listing
Fresh listing
Recently published to Agensi
Money-back guarantee
Doesn't do what its page promises? You get your money back.
Trust & safety
Security scan
Security scan passed 1 month ago
Permissions
No special permissions declared or detected