ai-incident-triagelisted

Triage an AI or agent incident — classify what failed, establish severity and reach, determine whether external reporting obligations are engaged, and produce the incident record. Use this whenever an AI system or agent caused a problem, produced a harmful or wrong output that reached someone, took an action it should not have, leaked data, or failed in production; whenever someone says "the agent did something bad", "we had an AI incident", "this model gave a customer the wrong answer", or asks whether an AI failure needs reporting to a regulator. Use it for near misses too, since those carry the same lessons at a fraction of the cost. Reach for this before writing any incident summary or RCA involving an AI system, because the classification and the reporting-clock assessment need to happen early — reporting deadlines under the EU AI Act and DORA run from awareness, not from the end of your investigation.
patkusch/remit · ★ 0 · AI & Automation · score 72

Install: claude install-skill patkusch/remit

# AI incident triage Two jobs, and the second is time-critical: **classify what happened**, and **establish whether a reporting clock is running**. Do them in that order but do not let the first delay the second — EU AI Act Art. 73 and DORA deadlines run from the point of awareness, not from the point where your investigation concludes. ## Immediately: is a clock running? Before the detailed analysis, make a preliminary call and say so explicitly. Get this question to whoever owns the determination within the first hour. Signals that an external obligation may be engaged: - Death, serious harm to health, or serious damage to property - Serious and irreversible disruption of critical infrastructure - Breach of fundamental rights obligations - Personal data breach (GDPR Art. 33 — 72 hours) - ICT-related incident affecting a critical or important function (DORA) - Any incident in a system classified high-risk under the EU AI Act **You are not the person who makes the reporting decision.** Your job is to surface the possibility fast, with the facts, and route it. Never let a report imply that no obligation exists merely because you did not assess it — say what you assessed and what you did not. Timings, for the escalation note: EU AI Act Art. 73 — 15 days generally, 2 days for widespread infringement or serious critical-infrastructure disruption, 10 days for death. An initial incomplete report is permitted to meet the deadline. ## Then: classify Run [`agent-failure-diagn