Designs and documents structured incident response playbooks with step-by-step procedures per incident type, decision trees, escalation criteria, RACI matrices, and SOAR platform integration, aligned to NIST SP 800-61r3 and SANS PICERL. Use when creating or maturing an IR program, documenting response runbooks for a new incident type, or designing SOAR playbooks.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-incident-response-playbooknpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-incident-response-playbook -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill building-incident-response-playbook -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/building-incident-response-playbookgh skill install mukul975/Anthropic-Cybersecurity-Skills building-incident-response-playbookgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-incident-response-playbook ~/.claude/skills/building-incident-response-playbook # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/building-incident-response-playbook ~/.agents/skills/building-incident-response-playbook # Codex, Cursor, Gemini CLI, Copilot, OpenCode