← All skills
incident-response
80 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
By anubhavg-icpl/vibe (GitHub) · coding · 13 stars · scanned at commit d51e7ac
Use when a security incident has been detected or declared and needs classification, triage, escalation path determination, and forensic evidence collection. Covers SEV1-SEV4 classification, false positive filtering, incident taxonomy, and NIST SP 800-61 lifecycle.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 66 places.
Show 17 more
- skills/rezvani-incident-response/SKILL.md, line 289
echo '{"event_type": "ransomware", "host": "prod-db-01", "user": "svc_backup"}' | \ - .claude/settings.json, line 9
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" pre-bash'", - .claude/settings.json, line 19
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" pre-edit'", - .claude/settings.json, line 31
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" post-edit'", - .claude/settings.json, line 41
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" post-bash'", - .claude/settings.json, line 52
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" route'", - .claude/settings.json, line 63
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" session-restore'", - .claude/settings.json, line 68
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/auto-memory-hook.mjs\" import'", - .claude/settings.json, line 79
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" session-end'", - .claude/settings.json, line 90
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/auto-memory-hook.mjs\" sync'", - .claude/settings.json, line 102
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" compact-manual'" - .claude/settings.json, line 106
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" session-end'", - .claude/settings.json, line 116
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" compact-auto'" - .claude/settings.json, line 120
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" session-end'", - .claude/settings.json, line 131
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" status'", - .claude/settings.json, line 142
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" post-task'", - .claude/settings.json, line 153
"command": "sh -c 'exec node \"${CLAUDE_PROJECT_DIR:-.}/.claude/helpers/hook-handler.cjs\" notify'",
and 46 more places
Downloads and installs other software
The author does not mention this. It runs automatically when the plugin is installed.
Found in 10 places.
Show 7 more
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'incident-response' ] || [ -L ~/.agents/skills/'incident-response' ]; then echo 'A skill folder named incident-response already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/anubhavg-icpl/vibe' "$d" && git -C "$d" checkout --quiet 'd51e7ac9a34111cd2e63daed83c2198f91570050' -- 'skills/rezvani-incident-response' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/rezvani-incident-response' ~/.agents/skills/'incident-response' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'incident-response' ~/.claude/skills/'incident-response' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for anubhavg-icpl/vibe shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/anubhavg-icpl/vibe/)
Score history
| Date | Version | Score |
|---|
| 2026-11-08 | d51e7ac | 80 |