# ops-investigate-alert

Investigates production alerts end-to-end by collecting telemetry, error logs, and recent code diffs. Gives on-call engineers an evidence-based incident root cause.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · ★ 109
- Author: c0x12c
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/c0x12c/ai-toolkit/tree/HEAD/toolkit/skills/ops-investigate-alert/SKILL.md
- Updated: 2026-06-18
- HTML: https://affpapa.org/en/nevibecode/skills/ops-investigate-alert

## What it does

Alert triaging starts with an environment check. The skill inspects connected MCP servers for platforms like Datadog, Grafana, or PagerDuty. Without an active monitoring MCP server, the investigation stops immediately with an error. The user can pass either a direct monitor link or an alert name to begin.

The core procedure always gathers the monitor state, queries telemetry an hour around the incident, and pulls ERROR logs. When the GitHub CLI tool is authorized, the agent inspects the last two deployed tags to correlate exceptions with fresh commits. A Kubernetes MCP can also inspect pod health and OOM events.

The skill never pushes git tags or alters deployment states. Every run finishes with an inline breakdown containing evidence, diagnostic confidence, and targeted remediation steps.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add c0x12c/ai-toolkit --skill ops-investigate-alert -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/ops-investigate-alert/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/ops-investigate-alert/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add c0x12c/ai-toolkit --skill ops-investigate-alert -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/ops-investigate-alert/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add c0x12c/ai-toolkit --skill ops-investigate-alert -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/ops-investigate-alert/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install c0x12c/ai-toolkit ops-investigate-alert
```

2. **Manually: put the files in place**
- File: `.github/skills/ops-investigate-alert/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add c0x12c/ai-toolkit --skill ops-investigate-alert -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/c0x12c/ai-toolkit --path toolkit/skills/ops-investigate-alert
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/ops-investigate-alert/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add c0x12c/ai-toolkit --skill ops-investigate-alert -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/c0x12c/ai-toolkit/tree/HEAD/toolkit/skills/ops-investigate-alert/SKILL.md

## When to use it
- investigate triggered monitoring alerts
- correlate metric anomalies with application error logs
- diff recent releases with GitHub CLI during incidents
- inspect Kubernetes pod restarts near failure events

## Example prompts
- Investigate the high-memory-usage alert on the billing service
- Check metrics and logs for the failing payment-gateway monitor
- Analyze the auth-service-5xx alert and inspect recent code changes

## Similar
- [wizard](https://affpapa.org/en/nevibecode/skills/wizard.md) — skill · 553369 installs
- [hyperframes-cli](https://affpapa.org/en/nevibecode/skills/heygen-com-hyperframes-cli.md) — skill · 1300000 installs
- [setup-pre-commit](https://affpapa.org/en/nevibecode/skills/setup-pre-commit.md) — skill · 489289 installs
- [using-git-worktrees](https://affpapa.org/en/nevibecode/skills/using-git-worktrees.md) — skill · 217153 installs
- [finishing-a-development-branch](https://affpapa.org/en/nevibecode/skills/finishing-a-development-branch.md) — skill · 214439 installs
- [orca-cli](https://affpapa.org/en/nevibecode/skills/orca-cli.md) — skill · 354000 installs

From the same set: [c0x12c/ai-toolkit](https://affpapa.org/en/nevibecode/by/c0x12c/ai-toolkit.md) — 33 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md