{"slug":"bert-janp-incident-response-powershell","name":"Incident Response Powershell","description":"PowerShell Digital Forensics & Incident Response Scripts.","tagline":"PowerShell Digital Forensics & Incident Response Scripts.","category":"devops","tags":["incident-response","reliability","devops","forensics-tools","powershell","github"],"author":{"name":"Bert-JanP","verified":false,"url":"https://github.com/Bert-JanP"},"attribution":{"status":"community_indexed","statusLabel":"Community indexed","shortLabel":"COMMUNITY INDEXED","sourceLabel":"GitHub star discovery","sourceDetail":"Bert-JanP/Incident-Response-Powershell","creatorName":"Bert-JanP","creatorUrl":"https://github.com/Bert-JanP","sourceUrl":"https://github.com/Bert-JanP/Incident-Response-Powershell","indexedBy":"OpenAgentSkill community index","claimUrl":"https://www.openagentskill.com/skills/bert-janp-incident-response-powershell#claim-this-skill","claimCta":"Claim this skill","trustNote":"This listing was indexed from public sources and is not marked official until a maintainer claim is approved.","publicNote":"Attribution links to the public repository or creator profile. Creators can claim the listing to update ownership signals."},"stats":{"stars":797,"forks":111,"downloads":0,"rating":0,"review_count":0,"quality_score":54.01},"quality":{"score":86,"tier":"excellent","label":"Excellent","summary":"High-confidence pick with strong adoption and healthy maintenance signals.","signals":[{"label":"GitHub stars","value":"797","tone":"positive"},{"label":"Freshness","value":"21d ago","tone":"positive"},{"label":"Install ready","value":"Yes","tone":"positive"},{"label":"License","value":"BSD-3-Clause","tone":"neutral"}],"warnings":[]},"trust":{"version":"trust-score-v3","score":80,"tier":"strong","label":"Strong shortlist","summary":"Good trust signals with a few areas worth checking before rollout.","recommendedAction":"Test in a sandbox workflow and compare its install path with close alternatives.","dimensions":[{"id":"github_adoption","label":"GitHub adoption","score":76,"weight":0.13,"status":"info","detail":"797 GitHub stars"},{"id":"repo_activity","label":"Stars/forks activity","score":71,"weight":0.08,"status":"info","detail":"797 stars, 111 forks; issue activity unavailable in current metadata"},{"id":"maintenance","label":"Recent maintenance","score":100,"weight":0.14,"status":"pass","detail":"21d since push"},{"id":"license","label":"License clarity","score":86,"weight":0.09,"status":"pass","detail":"BSD-3-Clause"},{"id":"documentation","label":"README/SKILL.md completeness","score":74,"weight":0.14,"status":"info","detail":"Public metadata needs stronger README/SKILL.md context"},{"id":"dependency_risk","label":"Dependency/runtime risk","score":72,"weight":0.12,"status":"info","detail":"command execution surface"},{"id":"installability","label":"Install availability","score":92,"weight":0.1,"status":"pass","detail":"npx skills add Bert-JanP/Incident-Response-Powershell"},{"id":"install_safety","label":"Install command safety","score":68,"weight":0.1,"status":"info","detail":"dynamic command execution, standard package or runtime install path"},{"id":"permission_surface","label":"Permission surface","score":62,"weight":0.07,"status":"info","detail":"shell or command execution, filesystem or document access"},{"id":"repository","label":"Repository evidence","score":86,"weight":0.04,"status":"pass","detail":"https://github.com/Bert-JanP/Incident-Response-Powershell"},{"id":"review_status","label":"Review status","score":88,"weight":0.05,"status":"pass","detail":"AI review data available"}],"checks":[{"status":"info","label":"GitHub adoption","detail":"797 GitHub stars"},{"status":"info","label":"Stars/forks activity","detail":"797 stars, 111 forks; issue activity unavailable in current metadata"},{"status":"pass","label":"Recent maintenance","detail":"21d since push"},{"status":"pass","label":"License clarity","detail":"BSD-3-Clause"},{"status":"info","label":"README/SKILL.md completeness","detail":"Public metadata needs stronger README/SKILL.md context"},{"status":"info","label":"Dependency/runtime risk","detail":"command execution surface"},{"status":"pass","label":"Install availability","detail":"npx skills add Bert-JanP/Incident-Response-Powershell"},{"status":"info","label":"Install command safety","detail":"dynamic command execution, standard package or runtime install path"},{"status":"info","label":"Permission surface","detail":"shell or command execution, filesystem or document access"},{"status":"pass","label":"Repository evidence","detail":"https://github.com/Bert-JanP/Incident-Response-Powershell"},{"status":"pass","label":"Review status","detail":"AI review data available"},{"status":"warn","label":"Ownership","detail":"No approved owner claim yet"},{"status":"info","label":"OpenAgentSkill usage","detail":"No local usage activity yet"}],"strengths":["AI review approved","Install path is available","Repository evidence is available","Recently maintained repository","Meaningful GitHub adoption signal","Install command has no obvious high-risk pattern"],"warnings":["Quality score needs review"],"evidence":{"stars":"797 GitHub stars","repoActivity":"797 stars, 111 forks","lastPushed":"21d since push","license":"BSD-3-Clause","repository":"https://github.com/Bert-JanP/Incident-Response-Powershell","install":"npx skills add Bert-JanP/Incident-Response-Powershell","installSafety":"dynamic command execution, standard package or runtime install path","permissionSurface":"shell or command execution, filesystem or document access","documentation":"Usable metadata, review docs"},"installReadiness":{"ready":true,"command":"npx skills add Bert-JanP/Incident-Response-Powershell","policy":"human_review_before_install","label":"Human review before install","notes":["Install path is available","Repository evidence is available","License is declared","21d since push"]},"agentCompatibility":["PowerShell","Incident Response","Codex","Claude Code","Cursor","OpenAgentSkill CLI"],"riskSummary":{"level":"medium","label":"Review before production","notes":["Quality score needs review"]}},"safety":{"score":58,"level":"review_before_install","label":"Review before install","safety_tier":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","summary":"Usable candidate, but the agent should surface permission and audit notes before installation.","recommended_action":"Require human approval before installing into a real workspace.","auto_install_policy":"review","reasons":["High-risk permission hints: Shell or command execution","58/100 agent safety score"]},"auto_install_allowed":false,"human_review_required":true,"blocked":false,"audit_risk":"safe_to_try","permission_hints":[{"id":"shell","label":"Shell or command execution","reason":"Skill metadata references terminal, CLI, shell, subprocess, or command execution workflows.","severity":"high"},{"id":"network","label":"Network access","reason":"Skill likely fetches remote pages, APIs, repositories, or external services.","severity":"medium"},{"id":"filesystem","label":"Filesystem access","reason":"Skill may read or write project files, documents, generated artifacts, or local workspace state.","severity":"medium"}],"policy_warnings":["High-risk permission hints: Shell or command execution","Quality score needs review"],"constraints_applied":{"max_risk":"medium","needs_install_command":true,"min_stars":0}},"safety_gate":{"tier":"reviewed","label":"Reviewed with permission notes","badge":"REVIEWED","auto_install_policy":"review","auto_install_allowed":false,"human_review_required":true,"blocked":false,"recommended_action":"Require human approval before installing into a real workspace.","reasons":["High-risk permission hints: Shell or command execution","58/100 agent safety score"]},"supply_profile":{"track":{"slug":"coding","label":"Coding and developer agents","shortLabel":"Coding","description":"Code review, repo analysis, testing, CI, GitHub, DevOps, and developer workflow skills."},"scenario":{"label":"GitHub automation","description":"I need my agent to triage GitHub issues, review pull requests, and summarize repository changes.","useCases":[{"slug":"github-automation","title":"GitHub automation"},{"slug":"coding-agents","title":"Coding agents"},{"slug":"rag-knowledge","title":"RAG and knowledge"}]},"applicableAgents":["Claude Code","CLI","Codex","Cursor","PowerShell"],"install":{"ready":true,"command":"npx skills add Bert-JanP/Incident-Response-Powershell","primaryTarget":"CLI","targetCount":4},"githubQuality":{"stars":797,"starsLabel":"797","forks":111,"license":"BSD-3-Clause","qualityScore":86,"trustScore":80,"auditScore":86},"maintenance":{"status":"fresh","label":"21d since push","daysSincePush":21,"lastPushedAt":"2026-05-26T17:46:26+00:00"},"risk":{"level":"safe_to_try","label":"Safe to try","requiresReview":true,"notes":["Quality score needs review"]},"coverageTags":["Coding","GitHub automation","devops","incident-response","reliability","forensics-tools","powershell","github"]},"audit":{"audit_score":86,"risk_level":"safe_to_try","risk_label":"Safe to try","warnings":["Quality score needs review"]},"decision":{"readiness_score":97,"readiness_label":"Production-ready","headline":"Primary pick for GitHub automation","role":"Primary pick","primary_fit":"GitHub automation","best_for":["GitHub automation workflows","Claude Code teams","teams that value GitHub adoption signals"],"risks":["No OpenAgentSkill engagement data yet"],"next_steps":["Install it in a sandbox agent and run one GitHub automation task end to end.","Compare output quality, latency, and failure behavior against at least one alternative.","Promote it into production only after reviewing repository permissions, license, and maintenance signals."]},"platforms":["PowerShell","Incident Response","Claude Code"],"use_cases":[{"slug":"github-automation","title":"GitHub automation","url":"https://www.openagentskill.com/use-cases/github-automation"},{"slug":"coding-agents","title":"Coding agents","url":"https://www.openagentskill.com/use-cases/coding-agents"},{"slug":"rag-knowledge","title":"RAG and knowledge","url":"https://www.openagentskill.com/use-cases/rag-knowledge"},{"slug":"workflow-automation","title":"Workflow automation","url":"https://www.openagentskill.com/use-cases/workflow-automation"}],"install":"npx skills add Bert-JanP/Incident-Response-Powershell","install_targets":[{"id":"openagentskill-cli","label":"CLI","title":"OpenAgentSkill CLI","kind":"command","value":"npx skills add Bert-JanP/Incident-Response-Powershell","description":"Use the registry command when your workflow supports the OpenAgentSkill installer.","copyLabel":"Copy command"},{"id":"codex","label":"Codex","title":"Codex install prompt","kind":"agent-prompt","value":"Install the \"Incident Response Powershell\" agent skill from https://github.com/Bert-JanP/Incident-Response-Powershell. Read its SKILL.md or equivalent instructions first, install only the files needed for this workspace, and summarize any required setup before using it. Skill purpose: PowerShell Digital Forensics & Incident Response Scripts.","description":"Give Codex a repo-aware install prompt when the skill is not available through a local CLI.","copyLabel":"Copy prompt"},{"id":"claude-code","label":"Claude Code","title":"Claude Code skill prompt","kind":"agent-prompt","value":"Add \"Incident Response Powershell\" as a Claude Code skill from https://github.com/Bert-JanP/Incident-Response-Powershell. Inspect the skill instructions, place the reusable skill files in the appropriate local skills location for this project, and report the activation steps. Skill purpose: PowerShell Digital Forensics & Incident Response Scripts.","description":"Use this prompt to ask Claude Code to add the skill and explain the local activation steps.","copyLabel":"Copy prompt"},{"id":"cursor","label":"Cursor","title":"Cursor rule prompt","kind":"agent-prompt","value":"Turn \"Incident Response Powershell\" from https://github.com/Bert-JanP/Incident-Response-Powershell into a reusable Cursor project rule or agent instruction. Preserve the core workflow, adapt paths to this repo, and keep the rule scoped to tasks where it is relevant. Skill purpose: PowerShell Digital Forensics & Incident Response Scripts.","description":"Use this when installing as Cursor project rules or reusable agent instructions.","copyLabel":"Copy prompt"}],"repository":"https://github.com/Bert-JanP/Incident-Response-Powershell","github_repo":"Bert-JanP/Incident-Response-Powershell","version":"1.0.0","license":"BSD-3-Clause","updated_at":"2026-06-16T10:02:12.894679+00:00","canonical_key":"bert-janp/incident-response-powershell","recommendation_reasons":["Useful GitHub adoption: 797 stars","Install handoff is available","Repository freshness signal is available"],"urls":{"web":"https://www.openagentskill.com/skills/bert-janp-incident-response-powershell","api":"https://www.openagentskill.com/api/agent/skills/bert-janp-incident-response-powershell","install_api":"https://www.openagentskill.com/api/skills/bert-janp-incident-response-powershell/install","audit":"https://www.openagentskill.com/skills/bert-janp-incident-response-powershell/audit","repository":"https://github.com/Bert-JanP/Incident-Response-Powershell"},"meta":{"endpoint":"/api/registry/manifest/{slug}","canonical_agent_endpoint":"/api/agent/skills/bert-janp-incident-response-powershell","agent_friendly":true,"api_version":"1.0","generated_at":"2026-06-17T14:25:52.865Z"}}