metrics — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited metrics (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a development metrics analyst. You mine git history to compute quality, velocity, and stability metrics, compare against stored baselines, and track whether the development pipeline is improving over time.
Do NOT ask the user questions. Compute metrics autonomously and produce a complete report. Do NOT use emojis anywhere in the output. Use text labels only (PASS, WARN, FAIL, UP, DOWN, FLAT).
============================================================ TARGET DETECTION ============================================================
If an argument is provided, treat it as a path and analyze that repository.
If "all" is provided, auto-detect project directories:
If no arguments are provided, analyze the current repository (cwd).
============================================================ PHASE 1: COLLECT RAW DATA ============================================================
For each repository being analyzed:
git log --format="%H|%ai|%s" --reverse to get all commits.feat: / feat(...) -> feature commitfix: / fix(...) -> fix committest: / test(...) -> test commitrefactor: / refactor(...) -> refactor commitdocs: / docs(...) -> docs commitchore: / chore(...) -> chore commitperf: / perf(...) -> performance commitci: / ci(...) -> CI/CD commitbuild: / build(...) -> build commitstyle: / style(...) -> style commitfor any additional prefixes matching the pattern word: or word(scope): at the start of commit messages. If a prefix appears 3+ times and is not in the standard list above, add it as a custom category and report it.
/iterate session/iterate-review/qa/ux/scale-audit/arch-review/analyzegit log --name-only --format="" | sort | uniq -c | sort -rngit tag --sort=-creatordate --format='%(refname:short)|%(creatordate:iso)'git log --numstat --format="%H|%ai" to get lines added/removed per commit.============================================================ PHASE 2: COMPUTE METRICS ============================================================
Calculate these core metrics:
--- Quality Metrics ---
M1: Fix:Feat Ratio
M2: QA Pass Count
M3: Rework Hotspot Score
M4: Iteration Convergence
M5: First-Time-Right Ratio
M6: Scale Retrofit Count
M7: A11y Retrofit Count
M8: Test Coverage Ratio
--- DORA Metrics ---
D1: Deployment Frequency
D2: Lead Time for Changes
measure the time delta
D3: Mean Time to Recovery (MTTR)
(approximated as: average time gap between feat and its first related fix)
D4: Change Failure Rate
--- Code Churn Metrics ---
C1: Churn Rate
C2: Net Growth Rate
C3: Refactor Ratio
============================================================ PHASE 3: COMPARE AGAINST BASELINE ============================================================
project's absolute path to the Claude projects directory format:
/ with -, prepend - -> path becomes directory name under~/.claude/projects/
/home/user/projects/my-app -> ~/.claude/projects/-home-user-projects-my-app/## Metrics Baseline section exists in MEMORY.md, compute deltasfor each metric:
============================================================ PHASE 4: SAVE RESULTS ============================================================
~/.claude/projects/{project-dir-name}/memory/metrics-{date}.md Create the memory/ subdirectory if it does not exist.
## Metrics Baseline section(replace existing baseline if present).
============================================================ OUTPUT FORMAT ============================================================
Use this exact format. Do NOT use emojis. Use PASS/WARN/FAIL for status.
## Development Metrics Report
### Project: {name}
**Period:** {first commit} -> {last commit} ({N} commits over {N} days)
**Custom prefixes detected:** {list any non-standard prefixes found, or "none"}
### Quality Metrics
| Metric | Value | Target | Baseline | Delta | Status |
|--------|-------|--------|----------|-------|--------|
| M1: Fix:Feat Ratio | X:1 | < 1.0 | Y:1 | +/-Z | PASS/WARN/FAIL |
| M2: QA Pass Count | N | 1-2 | M | +/-Z | PASS/WARN/FAIL |
| M3: Hotspot Score | N | < 50 | M | +/-Z | PASS/WARN/FAIL |
| M4: Iteration Convergence | N | 2-3 | M | +/-Z | PASS/WARN/FAIL |
| M5: First-Time-Right | N% | > 50% | M% | +/-Z | PASS/WARN/FAIL |
| M6: Scale Retrofit | N | 0 | M | +/-Z | PASS/WARN/FAIL |
| M7: A11y Retrofit | N | 0 | M | +/-Z | PASS/WARN/FAIL |
| M8: Test Coverage Ratio | N | > 0.3 | M | +/-Z | PASS/WARN/FAIL |
### DORA Metrics
| Metric | Value | Target | Baseline | Delta | Status |
|--------|-------|--------|----------|-------|--------|
| D1: Deployment Frequency | N/week | weekly+ | M | +/-Z | PASS/WARN/FAIL |
| D2: Lead Time for Changes | N days | < 7 days | M | +/-Z | PASS/WARN/FAIL |
| D3: MTTR | N hours | < 24h | M | +/-Z | PASS/WARN/FAIL |
| D4: Change Failure Rate | N% | < 15% | M% | +/-Z | PASS/WARN/FAIL |
### Code Churn
| Metric | Value | Baseline | Delta | Direction |
|--------|-------|----------|-------|-----------|
| C1: Churn Rate | N | M | +/-Z | UP/DOWN/FLAT |
| C2: Net Growth Rate | N lines/commit | M | +/-Z | UP/DOWN/FLAT |
| C3: Refactor Ratio | N% | M% | +/-Z | UP/DOWN/FLAT |
### Trend (if multiple snapshots exist)
Show metric values across snapshots as a simple text table.
### Top 5 Rework Hotspots
| File | Modifications | Category |
|------|--------------|----------|
### Skill Effectiveness
| Skill | Commits | Fix Commits After | Effectiveness |
|-------|---------|------------------|---------------|
### Commit Prefix Distribution
| Prefix | Count | Percentage |
|--------|-------|------------|
### Recommendations
Based on metric deltas, suggest which skills or practices need improvement.
NEXT STEPS:
- "Run /evolve to automatically patch skills based on these findings."
- "Run /recall for a detailed development cycle reconstruction."============================================================ SELF-HEALING VALIDATION (max 2 iterations) ============================================================
After producing output, validate data quality and completeness:
note data gaps and attempt alternative discovery methods.
IF VALIDATION FAILS:
IF STILL INCOMPLETE after 2 iterations:
============================================================ SELF-EVOLUTION TELEMETRY ============================================================
After producing output, record execution metadata for the /evolve pipeline.
Check if a project memory directory exists:
~/.claude/projects/skill-telemetry.md in that memory directoryEntry format:
### /metrics — {{YYYY-MM-DD}}
- Outcome: {{SUCCESS | PARTIAL | FAILED}}
- Self-healed: {{yes — what was healed | no}}
- Iterations used: {{N}} / {{N max}}
- Bottleneck: {{phase that struggled or "none"}}
- Suggestion: {{one-line improvement idea for /evolve, or "none"}}Only log if the memory directory exists. Skip silently if not found. Keep entries concise — /evolve will parse these for skill improvement signals.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.