Kubernetes Network Root Cause Analysis
kubeshark/kubeshark
Investigates past Kubernetes incidents from Kubeshark traffic snapshots: takes captures, dissects API calls, extracts PCAPs and compares traffic over time.
Handles customer situations that have exceeded normal support — severity assessment, incident communication, executive escalation, and recovering a relationship after a failure.
$ npx skills add cbrock84/headcount --skill escalation-management -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install cbrock84/headcount escalation-management --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/cbrock84/headcount.git skills-src && mkdir -p .claude/skills && cp -r skills-src/plugins/customer-experience/skills/escalation-management .claude/skills/escalation-management && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "escalation-management" agent skill from https://github.com/cbrock84/headcount/tree/main/plugins/customer-experience/skills/escalation-management into .claude/skills/escalation-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "escalation-management", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/cbrock84/headcount/tree/main/plugins/customer-experience/skills/escalation-managementType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add cbrock84/headcount --skill escalation-management -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install cbrock84/headcount escalation-management --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cbrock84/headcount.git skills-src && mkdir -p .agents/skills && cp -r skills-src/plugins/customer-experience/skills/escalation-management .agents/skills/escalation-management && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "escalation-management" agent skill from https://github.com/cbrock84/headcount/tree/main/plugins/customer-experience/skills/escalation-management into .agents/skills/escalation-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "escalation-management", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add cbrock84/headcount --skill escalation-management -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install cbrock84/headcount escalation-management --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cbrock84/headcount.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/plugins/customer-experience/skills/escalation-management .cursor/skills/escalation-management && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "escalation-management" agent skill from https://github.com/cbrock84/headcount/tree/main/plugins/customer-experience/skills/escalation-management into .cursor/skills/escalation-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "escalation-management", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/cbrock84/headcount.git --path plugins/customer-experience/skills/escalation-management--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add cbrock84/headcount --skill escalation-management -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install cbrock84/headcount escalation-management --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cbrock84/headcount.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/plugins/customer-experience/skills/escalation-management .gemini/skills/escalation-management && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "escalation-management" agent skill from https://github.com/cbrock84/headcount/tree/main/plugins/customer-experience/skills/escalation-management into .gemini/skills/escalation-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "escalation-management", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install cbrock84/headcount escalation-managementInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add cbrock84/headcount --skill escalation-management -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/cbrock84/headcount.git skills-src && mkdir -p .github/skills && cp -r skills-src/plugins/customer-experience/skills/escalation-management .github/skills/escalation-management && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "escalation-management" agent skill from https://github.com/cbrock84/headcount/tree/main/plugins/customer-experience/skills/escalation-management into .github/skills/escalation-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "escalation-management", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add cbrock84/headcount --skill escalation-management -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install cbrock84/headcount escalation-management --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cbrock84/headcount.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/plugins/customer-experience/skills/escalation-management .opencode/skills/escalation-management && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "escalation-management" agent skill from https://github.com/cbrock84/headcount/tree/main/plugins/customer-experience/skills/escalation-management into .opencode/skills/escalation-management/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "escalation-management", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
escalation-managementHandles customer situations that have exceeded normal support — severity assessment, incident communication, executive escalation, and recovering a relationship after a failure.
Escalation Management is an agent skill from cbrock84/headcount. Handles customer situations that have exceeded normal support — severity assessment, incident communication, executive escalation, and recovering a relationship after a failure. Use this when a customer issue is escalating or has gone to leadership, during a customer-affecting outage, when a major account is at risk, when a relationship needs repairing after a failure, or to design the escalation path itself.
Its SKILL.md is about 930 tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including reference files (for example `references/sources.md`).
It sits in DevOps & Cloud, covering Incident response. The repository describes itself as: An agent organization structured as a company — 15+ departments, 125+ skills, each independently installable, citing the standards and regulators that settle the question. Runs… The licence is MIT.
Read from SKILL.md and the folder at commit 98d1c17. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Escalation Management loads about 930 tokens when it runs, and up to ~1.2k if it reads all its reference files. Until then it costs about 109 tokens; SKILL.md has 518 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from cbrock84/headcount at commit 98d1c17, republished under its MIT licence (© cbrock84). 518 words, ~930 tokens.
.claude/skills/escalation-management/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.An escalation is a signal that the normal path failed. Handling it well matters; the more useful question afterward is why it was needed.
Severity is what it costs them, not how alarming it looks internally. A cosmetic bug blocking a regulated filing is severe. A total outage of a feature nobody uses is not.
Ask: what can they not do, how many people, is there a workaround, and is there a deadline attached. That last one converts a medium into a critical more often than anything technical.
Own it visibly. One named person, introduced to the customer, who does not disappear. Escalations get worse when ownership is ambiguous — the customer starts re-explaining, which is its own insult.
Communicate on a stated cadence, and hold it even when there is nothing new. "No update yet, next update at three" preserves trust; silence destroys it faster than bad news does. Customers escalate again because they heard nothing, far more often than because of the underlying issue.
Separate acknowledgment from explanation. Acknowledge the impact immediately, in their terms. Explanation comes when you actually know. Leading with a cause you have not confirmed means retracting it later, and the retraction is what they remember.
Do not over-promise to end the conversation. Every commitment made under pressure to a frustrated customer is a commitment someone has to keep, and failing a recovery promise ends the relationship.
When a customer reaches your leadership, the relationship is already damaged — the escalation is the symptom.
Brief the executive properly before the call: what happened, what we have done, what we are committing to, and what not to promise. An executive walking in uninformed makes commitments the delivering team learns about afterward.
Recovery is not an apology. It is: acknowledge specifically what failed, say what changed so it cannot recur, and demonstrate it over time. Credits and discounts are compensation, not recovery — they close the ledger without addressing the trust.
The strongest recovery move is showing them the fix shipped.
Every escalation gets a short review: what made the normal path fail, was severity assessed correctly, did we communicate on time, and what would have prevented it.
Escalation volume is a health metric for the whole function. Rising escalations mean the normal path is failing more often, and that is the thing to fix.
references/sources.md in this skill lists the outside authorities that settle the questions
here — what each one is authoritative for, and what you may do with it. Check them before
answering on anything they cover, and cite what you used. Most are free to read and not free
to reproduce; the use note on each is binding.
© cbrock84, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 1 other file (references) in plugins/customer-experience/skills/escalation-management of cbrock84/headcount.
Open the folder on GitHubat commit 98d1c17
Escalation Management next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Escalation Management this skillcbrock84/headcount | 2k | — | ~930 | Automated safety check: Pass | MIT | |
| Kubernetes Network Root Cause Analysiskubeshark/kubeshark | 12k | — | ~5.3k | Automated safety check: Pass | Apache-2.0 | |
| UModel Root Cause Analysisalibaba/UnifiedModel | 415 | — | ~1.9k | Automated safety check: Pass | Custom licence | |
| Learningskortix-ai/suna | 20k | — | ~1.1k | Automated safety check: Pass | Custom licence | |
| Oncallpigweed-project/pigweed | 548 | — | ~992 | Automated safety check: Pass | Apache-2.0 | |
| Loop Triage Reportcobusgreyling/loop-engineering | 11k | — | ~500 | Automated safety check: Pass | MIT |
kubeshark/kubeshark
Investigates past Kubernetes incidents from Kubeshark traffic snapshots: takes captures, dissects API calls, extracts PCAPs and compares traffic over time.
alibaba/UnifiedModel
Investigates a service incident to its root cause by querying a UModel object graph alongside metrics, logs, topology and recent deployments.
kortix-ai/suna
The project's episodic memory: a timestamped ledger of rules paid for with real outages and near-misses, one entry per incident.
pigweed-project/pigweed
Pigweed oncall rotation runbooks and maintenance workflows (such as rolling CIPD client tools for b/315378787).
cobusgreyling/loop-engineering
Turns CI failures, open issues, recent commits and chat threads into a prioritized markdown report that an automation loop can act on without inventing architecture work.
openclaw/clawhub
Investigates incidents and production problems with hypothesis-driven debugging, queries Axiom observability data when available, and keeps secrets out of commands and output.
cbrock84/headcount
Designs orchestrator-and-subagent hierarchies for a repository — splitting agents by exclusive write surface, pairing every producer with an independent auditor, and enforcing the split with a…
cbrock84/headcount
Designs and audits who can reach what — authentication, authorization models, privileged access, service credentials, and joiner-mover-leaver process.
cbrock84/headcount
Concentrates marketing and sales effort on a named set of accounts rather than on volume — qualifying whether the model fits your economics at all, building the account list and the buying group…
cbrock84/headcount
Gets new users from signup to first real value — signup flow, onboarding, time-to-value, and the early experience that determines whether someone becomes a user or a lapsed account.
cbrock84/headcount
Governs models and AI systems in production — intended use, evaluation, monitoring, human oversight, documentation, and the decision to deploy or retire.
cbrock84/headcount
Produces executive-level research — market sizing, competitor mapping, trend analysis, and strategic intelligence — grounded in cited sources with the confidence in each claim made explicit.
Categories
Handles customer situations that have exceeded normal support — severity assessment, incident communication, executive escalation, and recovering a relationship after a failure. Escalation Management is an agent skill from cbrock84/headcount. Handles customer situations that have exceeded normal support — severity assessment, incident communication, executive escalation, and recovering a relationship after a failure.
Escalation Management fits situations like: tasks that involve Incident response.
Run `npx skills add cbrock84/headcount --skill escalation-management -a claude-code`. Or copy the skill folder (plugins/customer-experience/skills/escalation-management in cbrock84/headcount) into .claude/skills/escalation-management in your project. Claude Code loads it when a task matches its description.
Run `npx skills add cbrock84/headcount --skill escalation-management -a codex`. Or copy the skill folder (plugins/customer-experience/skills/escalation-management in cbrock84/headcount) into .agents/skills/escalation-management in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add cbrock84/headcount --skill escalation-management -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/escalation-management, .gemini/skills/escalation-management, .github/skills/escalation-management and .opencode/skills/escalation-management in your project.
SKILL.md names no scripts, command-line tools or credentials: Escalation Management is instructions for the agent only.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Escalation Management is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 930 tokens (SKILL.md is roughly 3.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 236 tokens, read only when the agent opens those files.
Skills that share tags, products or a category with Escalation Management: Kubernetes Network Root Cause Analysis (kubeshark/kubeshark, 12k stars), UModel Root Cause Analysis (alibaba/UnifiedModel, 415 stars), Learnings (kortix-ai/suna, 20k stars) and Oncall (pigweed-project/pigweed, 548 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
cbrock84 (a GitHub user) maintains it in cbrock84/headcount, which has 2,016 GitHub stars. The repository holds 178 skills in this directory. The repository was last updated on September 17, 2026.
Source: cbrock84/headcount on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.