Skip to content
Back to skills

Retrospective

ASecurity

Run a blameless retrospective — gather a timeline, generate insights, decide a few owned dated actions, and feed lessons into CONTINUITY.md memory. Use when: run a retrospective for the release milestone, do a blameless retro on the sprint, what went well and what didnt, capture lessons learned into memory, hold a start stop continue review, retrospective with owned action items, feed these lessons into continuity.

  • 23 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 11, 2026
ai-agentsgorailssecurity

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned November 11, 2026

npx -y skills add andreibesleaga/GABBE --skill retrospective --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Retrospective?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Retrospective
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/andreibesleaga-retrospective/badge)](https://www.skillsdirectory.com/skills/andreibesleaga-retrospective)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: retrospective
description: "Run a blameless retrospective — gather a timeline, generate insights, decide a few owned dated actions, and feed lessons into CONTINUITY.md memory. Use when: run a retrospective for the release milestone, do a blameless retro on the sprint, what went well and what didnt, capture lessons learned into memory, hold a start stop continue review, retrospective with owned action items, feed these lessons into continuity."
license: CC-BY-SA-4.0
metadata:
  source: "agents/skills/core/retrospective.skill.md"
  tags: "core, retrospective, learning, memory"
  core: "false"
  context_cost: "medium"
---
# Retrospective Skill

## Goal
Run a blameless retrospective that turns a completed period of work (sprint, milestone, incident, project phase) into a small set of owned, dated improvement actions and durable lessons. The retro is blameless: it examines the *system and process* that produced an outcome, never an individual's fault. Its lasting value is the feedback loop — lessons are written into `CONTINUITY.md` so future sessions inherit them. The output ties to `PROJECT_RETROSPECTIVE_TEMPLATE.md`.

## Steps
1. **Set the frame.** State the scope and time window under review and the blameless ground rule explicitly: assume everyone did their best with the information they had; focus on process and system, not people.
2. **Gather data — build the timeline.** Reconstruct what actually happened, in order, from objective sources: the audit trail (`audit-trail.skill`), commits, PRs, incidents, telemetry, and milestone dates. A shared factual timeline prevents the retro from drifting into opinion before the facts are agreed.
3. **Pick a format.** Choose one to structure insight-generation: **Start/Stop/Continue** (lightweight, action-oriented), **4Ls** (Liked / Learned / Lacked / Longed-for, reflective), or **Sailboat** (wind = what propels us, anchors = what holds us back, rocks = risks, island = goal). Match the format to the situation; do not run all three.
4. **Generate insights.** Using the chosen format, surface what went well, what didn't, and the *puzzles* — things the team genuinely doesn't understand yet and may need to investigate. Group and cluster related observations; look for root causes, not just symptoms.
5. **Decide actions — few, owned, dated.** Convert insights into a short list (ideally 1-3) of concrete improvement actions. Each action has a single named owner and a due date. Resist the trap of generating a long wish-list that no one executes; a few completed actions beat many ignored ones.
6. **Feed lessons into memory.** Distill durable, reusable lessons (not one-off task notes) and append them to `agents/memory/CONTINUITY.md` so future sessions start with this knowledge. Cross-reference the audit trail for the source events.
7. **Record the retro.** Assemble the timeline, insights, and owned actions into the Output Format below.

## Constraints
- Strictly blameless: no entry may name an individual as the cause of a failure; reframe to systemic factors.
- Build the factual timeline before generating insights — facts first, interpretation second.
- Use exactly one format per retro; do not blend Start/Stop/Continue, 4Ls, and Sailboat into one session.
- Action items are few, each with one named owner and a due date; an action with no owner or date is not recorded as an action.
- Durable lessons (not ephemeral task notes) are appended to `CONTINUITY.md`; appends do not overwrite prior memory.
- The skill facilitates and records; it does not assign blame, and it does not invent timeline facts not supported by sources.

## Output Format
A retrospective record in Markdown following `PROJECT_RETROSPECTIVE_TEMPLATE.md`:
- **Scope & window** — what and when is under review; blameless ground rule stated.
- **Timeline** — ordered factual events with sources (audit trail, PRs, incidents).
- **Format** — which framework was used.
- **Insights** — what went well / what didn't / puzzles, clustered to root causes.
- **Action items** — table of action, single owner, due date, success signal.
- **Lessons → CONTINUITY.md** — the durable lessons appended to memory.

## Security & Guardrails

### 1. Skill Security
- **Risk**: PII or sensitive incident detail leaking into a shared retro record or `CONTINUITY.md`. Mitigation: record systemic lessons, not personal data; redact credentials, customer PII, and security-sensitive specifics before writing to memory.
- **Risk**: Overwriting prior memory when appending lessons. Mitigation: append to `CONTINUITY.md` (never overwrite); preserve existing entries and timestamp/scope new ones.

### 2. System Integration Security
- **Risk**: Timeline facts pulled from tamperable sources producing a misleading narrative. Mitigation: prefer the append-only audit trail and version-controlled history as primary sources; note when a fact is unverified rather than asserting it.
- **Risk**: A security incident's retro exposing exploit details broadly. Mitigation: store security-sensitive retros with restricted access and summarize only the remediation/lesson in shared memory.

### 3. LLM & Agent Guardrails
- **Risk**: The agent (or a user prompt) steering the retro to blame a named individual. Mitigation: the agent must refuse to attribute failure to a person and pivot to blameless, systemic analysis — even when explicitly asked to write a blame report.
- **Risk**: Action-item inflation — the agent generating a long, unowned list that dilutes follow-through. Mitigation: cap actions to a few, require an owner and date for each, and drop any candidate action that cannot be owned and dated.

Files in this skill

  • PROJECT_RETROSPECTIVE_TEMPLATE.md1.4 KB
  • SKILL.md5.5 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

View all in ai-agents →

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.