Works with the AI Agents you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIMuseMuseDotsDots+21 more

    Incident Postmortem Skill

    1

    Transform raw incident logs and notes into structured, blameless postmortems and actionable prevention plans.

    $9.99

    Secure checkout via Stripe

    Money-back guarantee

    Converts to your local currency at checkout

    Security scanned
    Incident Postmortem Skill

    Incident Postmortem Skill

    Example session with this skill installed

    Generate a postmortem for incident #402. Services: API Gateway. Detected: 14:02 UTC via Datadog. Resolved: 14:45 UTC. Cause: Bad config deploy at 13:55 UTC. Impact: 15% 5xx errors for US-East users.

    • Read your context and instructions
    • Compiled the incident postmortem

    I have processed the incident data for #402 and generated a structured, blameless postmortem focused on the API Gateway failure.

    Incident Postmortem: #402 API Gateway 5xx Errors

    1. Executive Summary

    On 2023-10-12, the API Gateway experienced a partial outage affecting users in the US-East region. The incident lasted 43 minutes, triggered by a configuration deployment. Resolution was achieved by rolling back the affected configuration.

    2. Impact

    • Affected System: API Gateway / US-East Region.
    • User Impact: Approximately 15% of requests returned 5xx status codes.
    • Duration: 14:02 UTC to 14:45 UTC (43 minutes).

    3. Timeline

    TimestampEventSource
    13:55 UTCConfiguration deployment initiatedDeploy Logs
    14:02 UTCSpike in 5xx errors; Datadog alert triggersDatadog
    14:10 UTCEngineering team acknowledges alert; investigation beginsIncident Notes
    14:30 UTCRoot cause identified as invalid gateway routing configIncident Notes
    14:40 UTCRollback to previous stable config initiatedDeploy Logs
    14:45 UTCError rates return to baseline; incident resolvedDatadog

    4. Root Cause

    The primary cause was an invalid routing configuration deployed to the API Gateway. The configuration change contained a syntax error that passed basic validation but failed during high-concurrency traffic routing in the production environment.

    5. Action Items

    • Action: Implement automated integration tests for routing logic in CI/CD.

    • Priority: High

    • Reason: Prevent syntax or logic errors from reaching production.

    • Verification: CI pipeline must pass new 'gateway-routing' test suite.

    • Action: Review Datadog alert thresholds for earlier detection.

    • Priority: Medium

    • Reason: 7-minute gap between deployment and alert trigger.

    Next steps

    1. Assign the CI/CD integration test task to the DevOps squad.
    2. Conduct a technical review of the failed configuration file to update the linter rules.
    3. Schedule a 15-minute sync to discuss the detection lag.

    Connects securely to your tools. The creator never sees your data.

    About this skill

    Writing postmortems after a production outage is a tedious, high-stakes task that often falls to exhausted engineers. This skill converts messy incident notes, Slack logs, and monitoring alerts into structured, blameless documentation. It removes the friction of formatting and categorization while ensuring the final report focuses on systemic improvements rather than human error.

    What it does

    • Evidence synthesis transforms raw logs and timestamps into a cohesive narrative.
    • Root cause isolation distinguishes between triggers, contributing factors, and core systemic weaknesses.
    • Impact quantification summarizes affected services and customer symptoms based strictly on provided data.
    • Blameless analysis reframes errors as process or tooling gaps to maintain engineering culture.
    • Actionable remediation generates prioritized tasks for prevention and verification.

    How it works

    1. Provide the raw incident data, including timestamps, log snippets, and response notes.
    2. The skill analyzes the sequence of events to build a chronological timeline.
    3. It categorizes detection gaps, response delays, and technical failures.
    4. Review the structured report, action items, and identified prevention plans.

    Frameworks & tools

    This skill is framework-agnostic and works with data from PagerDuty, Jira, Datadog, Slack, and AWS CloudWatch logs.

    Why this beats prompting it yourself

    Generic prompts often hallucinate root causes or use judgmental language that damages team morale. This skill enforces a strict blameless methodology and clearly labels missing information instead of filling gaps with fabrications.

    Use cases

    • Drafting official SRE postmortems after a high-severity production outage.
    • Summarizing internal incident response for weekly engineering leadership reviews.
    • Converting chaotic Slack incident channel logs into a structured knowledge base.

    Known limitations

    This skill cannot access live systems to pull logs directly. It relies entirely on the text provided by the user and will not invent missing timestamps or owners.

    Requires manual input of logs/notes. Does not integrate with live monitoring APIs. Will not fabricate missing data points like timestamps or owners.

    How to use

    1. 1

      Connect your agent to the Agensi MCP

      Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup

    2. 2

      Sign in to Agensi

      Your agent shows a sign-in link. Sign in and click Allow.

    3. 3

      Ask for what you need

      Your agent loads this skill and uses it on your task. It always asks before any payment.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill goes through the trust checks below.

    Security scanned

    Checked by our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    Money-back guarantee

    Doesn't do what its page promises? You get your money back.

    Trust & safety

    Security scan

    Security scan passed 1 month ago

    Permissions

    No special permissions declared or detected

    Listed1 month ago

    What's inside

    Frequently Asked Questions

    This skill requires you to paste or upload raw incident data, such as Slack exports, log snippets, or PagerDuty alerts; it does not connect directly to your production environment to pull logs.

    The skill is built on a blameless methodology that identifies systemic process failures and technical gaps rather than attributing outages to individual human error.

    Yes, while it provides a complete report including a timeline and root cause analysis, you can easily export the text into Jira, Confluence, GitHub, or any other internal documentation tool.

    Unlike a basic prompt, this skill is engineered to flag missing information (like a missing timestamp) rather than hallucinating details, ensuring your postmortems remain factual.

    You will receive the Incident Postmortem Skill file compatible with major AI agent platforms, along with a guide on how to input data for the most accurate results.

    New in DevOps & Cloud