Can I create a trigger to send an email if an incident has been on hold for so many days?

If you needed to, you could also create a custom date field that gets populated by a trigger anytime the incident gets changed to the "Hold" status.  Then use your Status field and the new custom field as your criteria for the report.   I'm just throwing some ideas out there for you.  Hope this helps.