Automated incident triage and management system that aggregates alerts, assesses severity, creates incidents, notifies stakeholders, and tracks resolution progress. Integrates with monitoring systems to provide comprehensive incident lifecycle management.
SkillScore100Maintained
Automatic
◆DevOps & SRE pack
Last verified 8/4/2026
What it changes
Passed 22 of 22 test cases with the skill, and 4 of 22 without it.
Without skill18%
With skill100%
Checks it passed that the model alone missed
Assigns the severity level P0.
Assigns the severity level P2.
Calculates the weighted severity score as 93.
and 19 more in the full report
18 fixed4 passed either way0 still failing0 broke
Pass-rate lift
+82 pp
Tokens
+199%
Agent turns
0%
Response time
-45%
Model gemini-3.6-flashMeasured 8/4/2026v122 of 22 cases passed with skill
Tokens, turns and time describe resource use, not a dollar price.
See it in action
One of 18 test cases the skill fixed. Same model, same prompt, with and without the skill.
1 of 18
Prompt
Under the escalation policy for P1 incidents, what is the required delay before escalating to director level, and what is the subsequent delay before escalating to executive level?
What was checked, without and with the skill
Checked
Without skill
With skill
Specifies a 15m delay for director level escalation under P1.
Missed
Passed
Specifies a 1h delay for executive level escalation under P1.
Missed
Passed
case-07 · gemini-3.6-flash · 8/4/2026 · answers are capped and redacted
What's inside
The instructions your model reads when the skill loads.
SKILL.md481 linessingle file
Incident Triage Automator Skill
Overview
The Incident Triage Automator skill provides intelligent incident management capabilities, automatically triaging alerts, assessing severity, and coordinating incident response across multiple monitoring systems. It reduces incident response time and ensures consistent handling of operational issues.
Capabilities
Core Functions
Alert Aggregation: Correlates alerts from Prometheus, Datadog, PagerDuty, and other monitoring systems
Severity Assessment: Uses ML-driven analysis to assess incident severity and impact
Automated Incident Creation: Creates structured incidents in incident management systems
Stakeholder Notification: Automatically notifies relevant stakeholders based on escalation policies
Runbook Recommendation: Suggests relevant runbooks based on incident patterns
Status Tracking: Tracks incident resolution progress and generates post-mortem reports
Supported Monitoring Systems
Prometheus: Alertmanager alerts and metrics
Datadog: Monitors, events, and alerts
PagerDuty: Incidents and on-call schedules
Grafana: Dashboard alerts and annotations
Custom: REST API integration for custom monitoring tools
Notification Channels
Slack: Channel notifications and DM alerts
Email: Rich HTML email notifications
Microsoft Teams: Channel and personal messages
PagerDuty: Escalation and on-call notifications
Usage
Basic Incident Triage
# Aggregate and triage alerts from all sources
skill invoke incident-triage-automator triage --time-window 1h --severity-threshold HIGH