Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

Back to skills

Five Whys

ASecurity

Uncover root causes by iteratively asking why a problem occurred, moving from symptoms to underlying system failures

22 stars
0 votes
0 copies
0 views
Added 9/20/2026
code-qualitygodatabase

Security Analysis

A100/100

Scanned 9/20/2026

Install to Claude Code

$npx -y skills add lev-os/agents --skill five-whys --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Five Whys?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Five Whys
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/lev-os-five-whys/badge)](https://www.skillsdirectory.com/skills/lev-os-five-whys)

More formats (shields.io, HTML) on the badges page.

Download Zip
Files
SKILL.md
---
name: five-whys
description: Uncover root causes by iteratively asking why a problem occurred, moving from symptoms to underlying system failures
---

# Five Whys

## Overview
Developed by Sakichi Toyoda and Taiichi Ohno at Toyota, the Five Whys is a root cause analysis technique that asks "why?" five times (or until reaching root cause) to move from problem symptoms to underlying system failures. Each answer forms the basis of the next "why?" The method reveals that surface problems (machine stopped) often trace to systemic issues (no maintenance strainer).

## When to Use
- Recurring problems that keep coming back despite fixes
- Symptoms being treated instead of root causes
- Need to move from blame to systemic understanding
- Team jumping to solutions before understanding problem
- Expensive failures requiring investigation
- Simple problems where heavy analysis frameworks are overkill

## The Process

### Step 1: Define the Problem Clearly
Write a specific, observable problem statement. Avoid vague language. Bad: "Quality is poor." Good: "Product X failed QA inspection 3 times this week due to misaligned components."

**Example:** "The website went down for 2 hours on Tuesday afternoon, affecting 10,000 users."

### Step 2: Assemble People Close to the Work
Gather those directly involved in the process—they have the detailed knowledge. Don't rely solely on management perspectives removed from day-to-day reality.

**Example:** Include the on-call engineer who responded, the developer who deployed, and the QA tester who reviewed the change.

### Step 3: Ask "Why?" and Document Answers
Ask why the problem occurred. Each answer becomes the input for the next "why?" Don't accept vague answers—push for specific, verifiable causes.

**Example:**
- **Problem**: Website went down
- **Why?** Database connection pool exhausted
- **Why?** Connection leak in new user authentication code
- **Why?** Code review didn't catch resource management bug
- **Why?** Code reviewers lack training on connection pooling patterns
- **Why?** No onboarding process for distributed systems concepts

### Step 4: Stop at the Root Cause
Continue asking until reaching a root cause you can act on. Signs you've hit root: answer is a process gap, missing system, or design flaw—not a person or one-time event.

**Example:** Root cause is "No onboarding process for distributed systems concepts," not "Developer made a mistake" (blame) or "Connection leaked" (symptom).

### Step 5: Implement System-Level Countermeasures
Fix the root cause, not the symptom. Verify the fix prevents recurrence, not just the specific instance.

**Example:** Countermeasure: Create distributed systems onboarding with connection pooling best practices, add automated tests for resource leaks, update code review checklist. Result: No further connection pool failures.

## Classic Taiichi Ohno Example

**Problem**: Machine stopped working

1. **Why?** Overload, fuse blew
2. **Why?** Bearing not sufficiently lubricated
3. **Why?** Lubrication pump not pumping sufficiently
4. **Why?** Pump shaft worn and rattling
5. **Why?** No strainer attached, metal scraps got in

**Root Cause**: Missing strainer (design/process flaw)
**Countermeasure**: Install strainer on all lubrication pumps

## Example Application

**Situation:** E-commerce company experiences spike in customer service complaints about late deliveries.

**Application:**
1. **Why are deliveries late?** Warehouse picking delays
2. **Why are picks delayed?** Inventory locations incorrect in system
3. **Why are locations incorrect?** Returns not scanned to proper shelf
4. **Why aren't returns scanned?** Scanners frequently dead or missing
5. **Why are scanners dead?** No charging station in returns area

**Root Cause**: Missing infrastructure (charging station), not "lazy workers"

**Countermeasure**: Install 5 charging stations in returns area, add scanner battery checks to opening checklist, train returns team on scan importance

**Outcome**: Late deliveries drop 60%, complaints fall 75%, warehouse productivity increases 20%.

## Anti-Patterns
- ❌ Stopping at blame ("Because Bob made a mistake")—root causes are systemic
- ❌ Accepting vague answers ("Bad communication")—push for specifics
- ❌ Treating 5 as magic number—stop when you hit root, might be 3 or 7
- ❌ Using technique for complex problems with multiple causes (use fishbone instead)
- ❌ Implementing fixes for symptoms (earlier whys) instead of root cause
- ❌ Conducting Five Whys alone—need diverse perspectives

## Related
- root-cause-analysis
- fishbone-diagram
- systems-thinking
- feedback-loops

Attribution

lev-oslev-os
View sourceMore from lev-os →
SSkills DirectorySkills Directory

Your tool, in front of Claude Code builders.

3 founder slots · $299/mo · GSC-verified traffic · sponsors can never buy grades.

See placements

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Your tool, in front of Claude Code builders.

3 founder slots · $299/mo · GSC-verified traffic · sponsors can never buy grades.

See placements

Related Skills

Caveman Review

Ultra-compressed code review comments. Cuts noise from PR feedback while preserving the actionable signal. Each comment is one line: location, problem, fix. Use when user says "review this PR", "code review", "review the diff", "/review", or invokes /caveman-review. Auto-triggers when reviewing pull requests.

1023331 votes

Caveman Commit

Ultra-compressed commit message generator. Cuts noise from commit messages while preserving intent and reasoning. Conventional Commits format. Subject ≤50 chars, body only when "why" isn't obvious. Use when user says "write a commit", "commit message", "generate commit", "/commit", or invokes /caveman-commit. Auto-triggers when staging changes.

1023331 votes

Springboot Verification

Verification loop for Spring Boot projects: build, static analysis, tests with coverage, security scans, and diff review before release or PR.

2456590 votes

Verification Loop

一个全面的 Claude Code 会话验证系统。

2456590 votes

Django Verification

Verification loop for Django projects: migrations, linting, tests with coverage, security scans, and deployment readiness checks before release or PR.

2456590 votes
View all in code-quality →