Skip to content
Back to skills

Core

ASecurity

Run a blameless retrospective — gather a timeline, generate insights, decide a few owned dated actions, and feed lessons into CONTINUITY.md memory.

  • 23 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added October 14, 2026
ai-agentsgorailssecurity

Security analysis

A100/100

Pro scans all 21 files and shows the line behind each finding

Scanned October 14, 2026

npx -y skills add andreibesleaga/GABBE --skill core --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Core?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Core
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/andreibesleaga-core-03217bbd/badge)](https://www.skillsdirectory.com/skills/andreibesleaga-core-03217bbd)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: retrospective
description: Run a blameless retrospective — gather a timeline, generate insights, decide a few owned dated actions, and feed lessons into CONTINUITY.md memory.
triggers:
  - run a retrospective for the release milestone
  - do a blameless retro on the sprint
  - what went well and what didnt
  - capture lessons learned into memory
  - hold a start stop continue review
  - retrospective with owned action items
  - feed these lessons into continuity
tags: [core, retrospective, learning, memory]
core: false
context_cost: medium
---
# Retrospective Skill

## Goal
Run a blameless retrospective that turns a completed period of work (sprint, milestone, incident, project phase) into a small set of owned, dated improvement actions and durable lessons. The retro is blameless: it examines the *system and process* that produced an outcome, never an individual's fault. Its lasting value is the feedback loop — lessons are written into `CONTINUITY.md` so future sessions inherit them. The output ties to `PROJECT_RETROSPECTIVE_TEMPLATE.md`.

## Steps
1. **Set the frame.** State the scope and time window under review and the blameless ground rule explicitly: assume everyone did their best with the information they had; focus on process and system, not people.
2. **Gather data — build the timeline.** Reconstruct what actually happened, in order, from objective sources: the audit trail (`audit-trail.skill`), commits, PRs, incidents, telemetry, and milestone dates. A shared factual timeline prevents the retro from drifting into opinion before the facts are agreed.
3. **Pick a format.** Choose one to structure insight-generation: **Start/Stop/Continue** (lightweight, action-oriented), **4Ls** (Liked / Learned / Lacked / Longed-for, reflective), or **Sailboat** (wind = what propels us, anchors = what holds us back, rocks = risks, island = goal). Match the format to the situation; do not run all three.
4. **Generate insights.** Using the chosen format, surface what went well, what didn't, and the *puzzles* — things the team genuinely doesn't understand yet and may need to investigate. Group and cluster related observations; look for root causes, not just symptoms.
5. **Decide actions — few, owned, dated.** Convert insights into a short list (ideally 1-3) of concrete improvement actions. Each action has a single named owner and a due date. Resist the trap of generating a long wish-list that no one executes; a few completed actions beat many ignored ones.
6. **Feed lessons into memory.** Distill durable, reusable lessons (not one-off task notes) and append them to `agents/memory/CONTINUITY.md` so future sessions start with this knowledge. Cross-reference the audit trail for the source events.
7. **Record the retro.** Assemble the timeline, insights, and owned actions into the Output Format below.

## Constraints
- Strictly blameless: no entry may name an individual as the cause of a failure; reframe to systemic factors.
- Build the factual timeline before generating insights — facts first, interpretation second.
- Use exactly one format per retro; do not blend Start/Stop/Continue, 4Ls, and Sailboat into one session.
- Action items are few, each with one named owner and a due date; an action with no owner or date is not recorded as an action.
- Durable lessons (not ephemeral task notes) are appended to `CONTINUITY.md`; appends do not overwrite prior memory.
- The skill facilitates and records; it does not assign blame, and it does not invent timeline facts not supported by sources.

## Output Format
A retrospective record in Markdown following `PROJECT_RETROSPECTIVE_TEMPLATE.md`:
- **Scope & window** — what and when is under review; blameless ground rule stated.
- **Timeline** — ordered factual events with sources (audit trail, PRs, incidents).
- **Format** — which framework was used.
- **Insights** — what went well / what didn't / puzzles, clustered to root causes.
- **Action items** — table of action, single owner, due date, success signal.
- **Lessons → CONTINUITY.md** — the durable lessons appended to memory.

## Security & Guardrails

### 1. Skill Security
- **Risk**: PII or sensitive incident detail leaking into a shared retro record or `CONTINUITY.md`. Mitigation: record systemic lessons, not personal data; redact credentials, customer PII, and security-sensitive specifics before writing to memory.
- **Risk**: Overwriting prior memory when appending lessons. Mitigation: append to `CONTINUITY.md` (never overwrite); preserve existing entries and timestamp/scope new ones.

### 2. System Integration Security
- **Risk**: Timeline facts pulled from tamperable sources producing a misleading narrative. Mitigation: prefer the append-only audit trail and version-controlled history as primary sources; note when a fact is unverified rather than asserting it.
- **Risk**: A security incident's retro exposing exploit details broadly. Mitigation: store security-sensitive retros with restricted access and summarize only the remediation/lesson in shared memory.

### 3. LLM & Agent Guardrails
- **Risk**: The agent (or a user prompt) steering the retro to blame a named individual. Mitigation: the agent must refuse to attribute failure to a person and pivot to blameless, systemic analysis — even when explicitly asked to write a blame report.
- **Risk**: Action-item inflation — the agent generating a long, unowned list that dilutes follow-through. Mitigation: cap actions to a few, require an owner and date for each, and drop any candidate action that cannot be owned and dated.

Files in this skill

  • agent-analytics.skill.md5.2 KB
  • audit-trail.skill.md6.1 KB
  • clarify.skill.md6 KB
  • emerging-tech.skill.md3.2 KB
  • empirical-methods.skill.md6.9 KB
  • evals/clarify.eval.yaml1.4 KB
  • evals/integrity-check.eval.yaml981 B
  • evals/research.eval.yaml941 B
  • final-review.skill.md4.5 KB
  • integrity-check.skill.md6.6 KB
  • knowledge-connect.skill.md4.2 KB
  • knowledge-gap.skill.md5.8 KB
  • preflight.skill.md9 KB
  • research.skill.md5.9 KB
  • retrospective.skill.md5.5 KB
  • sdlc-checkpoint.skill.md7 KB
  • self-heal.skill.md8.5 KB
  • session-resume.skill.md6.7 KB
  • skills-registry.skill.md5.2 KB
  • state-portability.skill.md6.3 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.