A comprehensive incident response framework providing automated triage, timeline reconstruction, and structured post-incident analysis for engineering teams.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install incident-commander
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install incident-commander using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Incident Commander?
The Incident Commander skill is a professional-grade incident response framework designed to manage technology incidents from detection through resolution and post-incident review. It implements battle-tested SRE and DevOps practices to provide structured tools for severity classification, timeline reconstruction, and thorough root cause analysis. By integrating these Openclaw Skills into your engineering workflow, teams can maintain situational awareness and technical excellence even during high-pressure outages.
This skill provides a command-and-control structure that balances technical resolution with stakeholder management. It ensures that every incident, whether a SEV1 critical outage or a SEV4 minor bug, receives the appropriate level of attention, documentation, and follow-up to build more resilient systems over time.
Incident Commander Use Cases
- Automating incident triage to determine severity levels (SEV1-SEV4) based on real-time impact metrics.
- Reconstructing complex incident timelines from scattered logs and event data to identify sequence patterns.
- Generating standardized Post-Incident Review (PIR) documents to facilitate blameless retrospectives.
- Orchestrating stakeholder communications using pre-built templates for internal leadership and external customers.
How Incident Commander Works
- The Incident Classifier script processes descriptions and metrics to output a severity level and initial response recommendations.
- Communication templates are populated based on the severity level to notify stakeholders and establish a war room.
- Technical responders use the framework to document actions and decisions in real-time.
- The Timeline Reconstructor processes timestamped events to create a chronological narrative of the incident.
- The PIR Generator applies RCA frameworks like the 5 Whys to synthesize follow-up action items and long-term preventions within the context of Openclaw Skills.
Incident Commander Setup
To deploy this skill, ensure your environment is configured for Python execution and the core scripts are accessible in your path.
# Clone the repository and navigate to the skill directory
cd skills/incident-commander
# Classify a new incident via CLI
echo '{"description": "API latency spikes", "affected_users": "40%"}' | python scripts/incident_classifier.py
# Generate a post-incident review
python scripts/pir_generator.py --incident assets/incident_data.json --output reports/pir_final.md
Incident Commander Data Schema & Taxonomy
The Incident Commander skill organizes data using standard formats to ensure interoperability between analysis tools.
| Data Type | Format | Key Metadata Fields |
|---|---|---|
| Incident Profile | JSON | severity, impact_score, ic_assigned, status |
| Event Log | JSON | timestamp, source, message, event_type |
| Timeline | Markdown | phase, duration, cumulative_time, event_summary |
| PIR Document | Markdown | root_cause, five_whys, action_items, metrics |
Incident Commander Advanced Features
- Support for multiple Root Cause Analysis (RCA) methodologies including Fishbone and 5 Whys.
- Automated duration analysis and detection-gap identification within the timeline reconstruction engine.
- Dynamic runbook generation that suggests mitigation strategies based on historical incident patterns.
- Extensible notification hooks that integrate Openclaw Skills with third-party monitoring and communication platforms.
SKILL.md
Loading
Related Openclaw Skills
Free Tool Strategy
A comprehensive strategic framework for building and launching free interactive tools that drive high-volume SEO traffic and lead generation.
Dependency Auditor
A comprehensive security and compliance toolkit for analyzing, auditing, and managing dependencies across multi-language software projects.
Content Creator Redirect
A specialized intent-routing skill that intelligently directs legacy content requests to high-performance production or strategy agents.
Company Operating System
A comprehensive meta-framework for implementing company operating systems like EOS, Scaling Up, and OKRs to drive organizational alignment.
Microsoft 365 Tenant Manager
An automated management suite for Microsoft 365 Global Administrators to streamline tenant configuration, security hardening, and user lifecycle operations.
Head of Regulatory Affairs
A specialized AI agent skill designed to navigate complex medical device regulatory pathways including FDA submissions and EU MDR certification.
METADATA
Featured*
