Skip to content
Back to skills

Core

ASecurity

Apply empirical and measurement methods to engineering decisions with sound experiment design, honest statistical interpretation, and root-cause analysis.

  • 23 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added October 14, 2026
ai-agentsgorailsgitsecurityperformance

Security analysis

A100/100

Pro scans all 21 files and shows the line behind each finding

Scanned October 14, 2026

npx -y skills add andreibesleaga/GABBE --skill core --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Core?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Core
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/andreibesleaga-core-470c2de4/badge)](https://www.skillsdirectory.com/skills/andreibesleaga-core-470c2de4)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: empirical-methods
description: Apply empirical and measurement methods to engineering decisions with sound experiment design, honest statistical interpretation, and root-cause analysis.
triggers: [design a controlled experiment, interpret benchmark statistics, analyze a b test results, choose measurement scale and metric, check effect size and confidence interval, run root cause analysis, avoid confounds in engineering experiment]
tags: [core, measurement, experimentation, statistics]
core: false
context_cost: medium
---
# Empirical Methods

## Goal
Bring empirical rigor to engineering decisions so that claims about performance, quality, or user behavior
rest on evidence rather than intuition. This skill operationalizes the empirical-methods strand of the
SWEBOK v4 "Engineering Foundations" knowledge area: measurement theory (scales, validity, reliability),
hypothesis and experiment design (design of experiments, controls, confound management), honest statistical
interpretation of benchmarks and A/B results (significance, effect size, confidence intervals), and
root-cause analysis as an engineering method. It pairs with the skills that gather the raw numbers —
`system-benchmark.skill` for performance measurement and `product-analytics.skill` for user-behavior
metrics — and ties its experiment artifact to `EXPERIMENT_PLAN_TEMPLATE.md`.

## Steps
1. **Define the measurement before measuring.**
   - State the **construct** you want to know about and the concrete metric that operationalizes it. Pick the
     right **scale** (nominal, ordinal, interval, ratio) because the scale bounds which statistics are
     legitimate (you cannot average ordinal ranks meaningfully). Check **validity** (does the metric measure
     the construct?) and **reliability** (does it give consistent results on repeat?). A precise-but-invalid
     metric is worse than an honest rough one.
2. **Frame a falsifiable hypothesis.**
   - Write a null and an alternative hypothesis in advance, plus the decision rule and the practically
     meaningful effect size *before* looking at data. Pre-registering the hypothesis and stopping rule
     prevents fishing for whatever turns out significant.
3. **Design the experiment.**
   - Apply design-of-experiments thinking: isolate the independent variable, hold others constant or
     randomize them, use a **control** group, and identify **confounds** (warm-up effects, caching, time of
     day, population skew) and how each is controlled. Decide sample size from the smallest effect worth
     detecting, not from convenience.
4. **Run and record honestly.**
   - Capture the full environment, the raw measurements (not just summaries), variance, and any anomalies or
     discarded runs with the reason. Reproducibility requires that another engineer could repeat the setup
     from the record alone.
5. **Interpret statistics with guardrails.**
   - Report **effect size** and a **confidence interval**, not just a p-value: statistical significance is
     not practical importance, and a tiny p-value on a trivial effect changes nothing. State the confidence
     level and what the interval actually means. Most importantly, **correlation is not causation** — only a
     controlled, randomized design licenses a causal claim; observational data yields association plus
     candidate confounds, no more.
6. **Run root-cause analysis when something fails.**
   - Treat a failure or surprising result as an empirical question: form hypotheses for the cause, test each
     against evidence (logs, metrics, bisection, controlled reproduction), and distinguish the confirmed root
     cause from contributing factors and from mere correlates. Stop at the cause you can demonstrate, not the
     first plausible story.

## Constraints
- The agent MUST report effect size and a confidence interval alongside any significance claim, and MUST NOT
  present a p-value alone as proof a change "works."
- Causal language is reserved for controlled, randomized designs; for observational or A/B data with
  uncontrolled confounds the agent states association only and lists the plausible confounds.
- The metric and scale are fixed before measurement; the agent does not switch metrics or stopping rules
  after seeing data, and flags any post-hoc analysis as exploratory, not confirmatory.
- Raw data and environment are recorded for reproducibility; a result that cannot be reproduced from the
  record is reported as preliminary.
- Honesty over narrative: the agent reports negative, null, and inconclusive results plainly rather than
  reframing them as wins.

## Output Format
Produce an experiment/measurement design (aligned to `EXPERIMENT_PLAN_TEMPLATE.md`) containing:
- The construct, the operational metric, its scale, and validity/reliability notes.
- The null and alternative hypotheses, the practically meaningful effect size, the sample-size rationale, and
  the pre-declared stopping rule.
- The design: independent variable, controls, randomization, and the identified confounds with their
  mitigations.
- An **interpretation guardrail block**: how results will be reported (effect size + confidence interval),
  the explicit reminder that significance is not importance and correlation is not causation, and the
  conditions under which a causal claim would be justified.
- For diagnostic use, a root-cause section separating confirmed cause from contributing factors and
  correlates.

## Security & Guardrails

### 1. Skill Security
- **Risk**: p-hacking / cherry-picking — metrics, segments, or stopping points are chosen after the fact to
  manufacture significance; mitigation: the agent fixes hypothesis, metric, and stopping rule in advance and
  labels any post-hoc slice as exploratory, never as confirmation.
- **Risk**: Causal overreach — an association is presented as a proven cause to justify a decision;
  mitigation: the agent gates causal language behind controlled randomized design and otherwise reports
  association plus confounds.

### 2. System Integration Security
- **Risk**: Benchmark or analytics data integrity — numbers come from a misconfigured, noisy, or
  non-representative pipeline; mitigation: the agent records the data source, environment, and known biases,
  and refuses to draw conclusions from data it cannot attribute or reproduce.
- **Risk**: Experiment side effects on production — an A/B or fault-injection run harms real users;
  mitigation: the agent requires guardrail metrics, blast-radius limits, and human sign-off before any
  experiment touches production traffic.

### 3. LLM & Agent Guardrails
- **Risk**: False precision — the model reports a point estimate with implied certainty and hides variance;
  mitigation: the agent always attaches intervals and variance and states the uncertainty in plain terms.
- **Risk**: Confirmation bias — the model interprets ambiguous data in favor of the expected outcome;
  mitigation: the agent states the null result honestly, lists alternative explanations, and reports
  inconclusive findings as inconclusive.

Files in this skill

  • agent-analytics.skill.md5.2 KB
  • audit-trail.skill.md6.1 KB
  • clarify.skill.md6 KB
  • emerging-tech.skill.md3.2 KB
  • empirical-methods.skill.md6.9 KB
  • evals/clarify.eval.yaml1.4 KB
  • evals/integrity-check.eval.yaml981 B
  • evals/research.eval.yaml941 B
  • final-review.skill.md4.5 KB
  • integrity-check.skill.md6.6 KB
  • knowledge-connect.skill.md4.2 KB
  • knowledge-gap.skill.md5.8 KB
  • preflight.skill.md9 KB
  • research.skill.md5.9 KB
  • retrospective.skill.md5.5 KB
  • sdlc-checkpoint.skill.md7 KB
  • self-heal.skill.md8.5 KB
  • session-resume.skill.md6.7 KB
  • skills-registry.skill.md5.2 KB
  • state-portability.skill.md6.3 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.