incident-response-playbook-creator
Professional incident response playbook generator based on NIST SP 800-61r3 (April 2025). Creates comprehensive, customized IR documentation for ransomware, data breach, and…
Plugin bundle · by Diego Consolini · no longer listed
About
incident-response-playbook-creator is a plugin bundle for AI coding tools published by Diego Consolini. No marketplace we read lists it any more; the last listing left on 2026-10-22. The last change we recorded was on 2026-10-22. As of our marketplace pass on 2026-10-21.
Professional incident response playbook generator based on NIST SP 800-61r3 (April 2025). Creates comprehensive, customized IR documentation for ransomware, data breach, and phishing incidents with GDPR Article 33/34 and HIPAA breach notification guidance. Includes NIST CSF 2.0 function mapping and 110KB of authoritative reference data.
What it asks for
- Installs as a plugin bundle
None of the marketplaces we read publishes its tools or the settings it asks for.
What it declares, asks for and runs, in full
Only install plugins from developers you trust. We list what marketplaces publish and do not test plugins.
Connect
No data for an automatic command: what its marketplaces declare does not say unambiguously how to connect it.
Where it is published
| Marketplace | Status | Version | Figures | Verified | First seen |
|---|---|---|---|---|---|
| Community marketplace diegocconsolini/claudeskillcollection (Open the source on GitHub) | Removed on 2026-10-22 | 2.2.0 | Forks (GitHub): 0 Stars (GitHub): 7 |
Not marked |
Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.
What the bundle contains
As published on Community GitHub marketplaces.
Agents: 1
incident-response-playbook-creator
What changed
- No longer listed on Community GitHub marketplaces
- Community GitHub marketplaces: removed
- Became a product we track
- Community GitHub marketplaces: appeared
Similar plugins
Products whose own names, descriptions, tools and skills are closest in meaning to this one, on every marketplace we read. Closeness is ranked within this list only.
-
Generate NIST CSF 2.0-aligned cybersecurity policies for small and mid-size businesses. Five production-ready generators (Acceptable Use, Incident Response, Password & MFA, Data…
-
Production incident response system with incident management workflows, intelligent debugging, runbook automation, and postmortem generation. Handles incident detection, triage…
-
The compliance specialist your AI calls: ISO 27001, SOC 2, GDPR, NIS 2, DORA and more.
-
Create professional playbooks, SOPs, and Scribe-style step guides with process maps and agent-executable SOP files.
-
Generate structured incident reports and post-mortems
-
Production incident management, triage workflows, and automated incident resolution
-
Production incident management, triage workflows, and automated incident resolution
-
Turn incidents and product signals into evidence for the next recovery or product decision.
Similar plugins by marketplace
The same question asked of one marketplace at a time: is there an analog of this plugin there?
Has a listing on Claude Code: claude-plugins-community (5)
-
Generate NIST CSF 2.0-aligned cybersecurity policies for small and mid-size businesses. Five production-ready generators (Acceptable Use, Incident Response, Password & MFA, Data…
-
Use Resolve for investigations, incidents, and production context.
-
SCOPE - Security, Compliance & Operational Policy Evaluation - A Claude plugin that runs deterministic pre-flight compliance evaluation on agentic workflows. Maps every MCP tool…
-
Enhance code quality and security through PagerDuty risk scoring and incident correlation. Score pre-commit diffs against historical incident data and surface deployment risk…
-
Check deployment risk, respond to incidents, and generate retrospectives, all from Claude Code. Connects to Rootly's MCP tools for real-time incident lifecycle management.
Has a listing on Claude Code: claude-plugins-official (5)
-
Work with incident.io from Claude: respond to and investigate incidents, check on-call schedules and escalations, and author the runbooks, skills and architecture docs that…
-
Enhance code quality and security through PagerDuty risk scoring and incident correlation. Score pre-commit diffs against historical incident data and surface deployment risk…
-
Full-lifecycle incident management: deploy safety, incident response, on-call management, and retrospectives.
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
Has a listing on Claude: knowledge-work-plugins (5)
-
Work with incident.io from Claude: respond to and investigate incidents, check on-call schedules and escalations, and author the runbooks, skills and architecture docs that…
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Create production-ready Pendo in-app guides (walkthroughs, announcements, alerts, polls, promotions) as HTML/CSS/JS from a short intake conversation, using Pendo's guide…
-
Create, edit, and deploy ServiceNow applications with the Fluent SDK effortlessly through Claude AI.
-
Streamline engineering workflows — standups, code review, architecture decisions, incident response, and technical documentation. Works with your existing tools or standalone.
Has a listing on Codex: openai-curated (openai/plugins) (5)
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
Codex Security workflows for security scans, analysis, and investigation.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Available for US1 customers only. Analyze, investigate, and act on your Datadog telemetry directly from ChatGPT using natural language. Ask questions about your production…
-
Notion workflows for implementation planning, research synthesis, meeting preparation, and knowledge capture.
Has a listing on Community GitHub marketplaces (4)
-
Production incident response system with incident management workflows, intelligent debugging, runbook automation, and postmortem generation. Handles incident detection, triage…
-
Create professional playbooks, SOPs, and Scribe-style step guides with process maps and agent-executable SOP files.
-
Generate structured incident reports and post-mortems
-
Production incident management, triage workflows, and automated incident resolution
Has a listing on Copilot CLI: github/awesome-copilot (5)
-
Official incident.io plugins for AI agents: skills for working with [incident.io](https://incident.io/) — incidents, on-call, and investigations — and for authoring the…
-
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import…
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
A focused set of prompts, instructions, and a chat mode to help triage incidents and respond quickly with DevOps tools and Azure resources.
-
Self-configuring status briefing generator. Learns your communication style from examples, discovers your data sources, and produces draft updates for any audience on demand.
Has a listing on Copilot CLI: github/copilot-plugins (5)
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
workiq
Query Microsoft 365 data with natural language — emails, meetings, documents, Teams messages, and more.
-
workiq-productivity
WorkIQ productivity skills powered by the local WorkIQ CLI — read-only insights across email, meetings, calendar, Teams, SharePoint, projects, and people.
-
Advanced Security plugin for GitHub Copilot.
-
Build and manage Microsoft Dataverse solutions using natural language. Includes table/column creation, solution lifecycle, data operations, and MCP server configuration.
Has a listing on Cursor: cursor/plugins (5)
-
Search company knowledge and draft verified answers.
-
Generate presentations, documents, and webpages.
-
Work with PostHog from chat: query product analytics and run SQL, manage feature flags and experiments, triage error tracking issues, and review session replays, surveys, and…
-
Scaffold and validate new agent plugins.
-
Manage envelopes, templates, workflows, and agreements.
Has a listing on Docker MCP Catalog (5)
-
Vectra AI MCP Server - An MCP server that connects AI assistants & agents to the Vectra AI security platform, enabling intelligent threat analysis and automated incident response.
-
Brings context about device inventory, threats, risks and utilization powered by the Cylera Partner API into an LLM.
-
Dynatrace-mcp io.github.dynatrace-oss/Dynatrace-mcp
[DEPRECATED] Dynatrace MCP Server. Migrate to dynatrace-for-ai or Dynatrace Remote MCP Server.
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
-
Connects with the Beagle Security backend using a user token to manage applications, run automated security tests, track vulnerabilities across environments, and gain intelligence…
Has a listing on Official MCP Registry (5)
-
The compliance specialist your AI calls: ISO 27001, SOC 2, GDPR, NIS 2, DORA and more.
-
csf io.github.compl-i-agent/csf
NIST CSF 2.0 - Professional cybersecurity framework with 35 tools and 12 prompts
-
AI governance MCP: A3 scorecard, ISO 42001 evidence templates, compliance checklist, gov_scan.
-
nis2-incident-runbook-lint io.github.jmshinhwa/nis2-incident-runbook-lint
Reads your incident-response runbook and says which of the three Article 23 clocks it gets wrong
-
HIPAA compliance AI agent — scan, grade, SRA, and generate compliance docs.
Has a listing on npm registry (MCP servers) (5)
-
CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
-
mcp com.dechonet/mcp
30 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, history, pivots.
-
Live AWS, database & Kafka infrastructure context for AI coding assistants via MCP.
-
List InternetData's IP and ASN databases, your license for each, what one holds, and its digests.
-
Extract every IP address, CIDR block and MAC, normalized and classified by scope.
Found by meaning, not by shared code or a shared repository: similar plugins stay separate products, and this is not a review or a recommendation.
Want this mark on your plugin in our catalog?
Prove you maintain it with a file in its repository, a file on your domain or a DNS record, and you can show this mark on the card, with live banners for your site and README. How verification works
You also get alerts when a marketplace lists it, drops it, changes its verified mark or what it asks for, and its remote endpoint goes on monitoring as a web service.
Data comes from public marketplace files in GitHub repositories of their authors. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.