# Screenpipe Incident Timeline

Reconstruct a bounded incident timeline and separate observed events from suspected...

- Repository: https://github.com/screenpipe/screenpipe (22202 stars)
- Category: Engineering
- License: see repository
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add screenpipe/screenpipe --skill screenpipe-incident-timeline -g -a claude-code -y`
Codex: `npx skills add screenpipe/screenpipe --skill screenpipe-incident-timeline -g -a codex -y`
Cursor: `npx skills add screenpipe/screenpipe --skill screenpipe-incident-timeline -g -a cursor -y`
Gemini CLI: `npx skills add screenpipe/screenpipe --skill screenpipe-incident-timeline -g -a gemini-cli -y`

## Description

Reconstruct a bounded incident timeline and separate observed events from suspected causes.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# incident timeline

Resolve the incident, affected system, and time window. Use screenpipe-api to recover relevant screens and conversations, then corroborate with available logs, monitoring, and service receipts. Normalize timestamps to one stated timezone while retaining source timestamps where needed.

List the first observed symptom, material changes, actions taken, and recovery evidence in chronological order. Distinguish when an event happened from when someone reported it. Label causal explanations as hypotheses unless directly established.

State the last verified condition and remaining uncertainty. An error disappearing from a screen does not prove recovery; cite a successful relevant operation or current health evidence. Propose follow-up investigation within scope. Do not restart services, roll back changes, or notify others without authorization.