{
  "id": "incident-response",
  "name": "incident-response",
  "description": "Use when a security incident has been detected or declared and needs classification, triage, escalation path determination, and forensic evidence collection. Covers SEV1-SEV4 classification, false positive filtering, incident taxonomy, and NIST SP 800-61 lifecycle.",
  "version": "1.0.0",
  "author": "alirezarezvani",
  "tags": [
    "engineering"
  ],
  "entryPoint": "tool_chain",
  "category": "engineering",
  "toolChain": [],
  "inputs": [],
  "outputs": [
    {
      "name": "result",
      "type": "string",
      "description": "Skill output"
    }
  ],
  "createdAt": "2026-04-27T00:40:32.546740Z",
  "updatedAt": "2026-04-27T00:40:32.546740Z"
}