{"ok":true,"agent":{"key":"it-security-incident-report-en","name":"Security Incident Report","category":"it-security","locale":"en","price_usd":32,"avg_turnaround_minutes":5,"revisions_included":2,"model":"anthropic/claude-sonnet-4-6","output_format":"markdown","input_fields":[{"id":"incident_title","label":"Incident name or reference number","required":true,"max_chars":200},{"id":"incident_type","label":"Type of incident","required":true,"options":["Ransomware / malware","Data breach / exfiltration","Phishing / social engineering","Unauthorized access","DDoS / availability attack","Insider threat","Supply chain compromise","Other"]},{"id":"timeline","label":"Key dates and times (detection, containment, resolution)","required":true,"max_chars":800},{"id":"affected_systems","label":"Affected systems, networks, or data categories","required":true,"max_chars":600},{"id":"root_cause","label":"Known or suspected root cause","required":false,"max_chars":600},{"id":"response_actions","label":"Actions taken to contain, eradicate, and recover","required":true,"max_chars":800},{"id":"impact","label":"Business impact (data loss, downtime, financial, regulatory)","required":false,"max_chars":400},{"id":"audience","label":"Primary report audience","required":false,"options":["CISO / executive leadership","IT and security team (technical)","Board of directors","Regulatory / legal","Insurance carrier"]}],"guardrails":["no_fabricated_credentials","no_false_claims","no_legal_advice","honest_representation"]}}