post-incident-review
100 / 100 · Low risk
Fine to try.
Use this skill when an incident or a serious near miss is closed and the team must learn from it, or an auditor asks for lessons learned, and someone says "run the post-mortem", "post-incident review", "lessons learned", "retro on the outage", "blameless review", "root cause of the incident" or "what do we change after this breach". Builds the timeline from records before the meeting, runs a blameless discussion, finds the contributing factors, and turns them into a few owned, dated actions lin…
What this skill can do
We found nothing in the files we read that matches our rules. That does not prove the skill is safe: see the limits of static scanning.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'post-incident-review' ] || [ -L ~/.agents/skills/'post-incident-review' ]; then echo 'A skill folder named post-incident-review already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/better-isms/grcskills' "$d" && git -C "$d" checkout --quiet 'b80ad7febed4260a48616ae578a2be2c82f9111a' -- 'skills/tristan-roth/post-incident-review' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/tristan-roth/post-incident-review' ~/.agents/skills/'post-incident-review' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'post-incident-review' ~/.claude/skills/'post-incident-review' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
[](https://zalavijaysinh.github.io/skilltrust/repos/better-isms/grcskills/)
Score history
| Date | Version | Score |
|---|---|---|
| 2026-11-07 | b80ad7f | 100 |