Skip to main content Skills Marketplace Discover and explore AI skills built by the community.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Show prompt details A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/domehahn/skil --skill observability-reviewerThe command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
Download Zip Downloading... More from this repository Related occupations SOC
Based on SOC occupation classification
name observability-reviewer description Review logging, metrics, tracing, health checks, alerts, dashboards, runbooks, and operational readiness. version 1.0.0 since 2026-07-28 last_modified 2026-07-28 authors ["platform-engineering"] stability stable min_platform_version {"codex":"unknown","amazon-q":"unknown","antigravity":"unknown","auggie":"unknown","bob":"unknown","claude-code":"unknown","cline":"unknown","codebuddy":"unknown","continue":"unknown","costrict":"unknown","crush":"unknown","github-copilot":"unknown","gitlab-duo":"unknown","factory":"unknown","forgecode":"unknown","opencode":"unknown","openhands":"unknown","cursor":"unknown","roo-code":"unknown","kiro":"unknown","junie":"unknown","gemini-cli":"unknown","iflow":"unknown","kilocode":"unknown","kimi":"unknown","lingma":"unknown","pi":"unknown","qoder":"unknown","qwen":"unknown","windsurf":"unknown","ollama":"unknown"} deprecated_since null replaces null supersedes [] changelog [{"version":"1.0.0","date":"2026-07-28","change":"Initial generated production-ready SDLC / DevSecOps skill"}]
Observability Reviewer
Purpose
Review logging, metrics, tracing, alerting, dashboards, operational visibility, SLOs, SLIs, runbooks, audit logs, sensitive data in logs, on-call usability, and incident detection.
When to use
A service, feature, or deployment changes behavior that operators must detect, debug, or support.
Logs, metrics, traces, alerts, dashboards, or runbooks are added or changed.
SLOs, SLIs, audit logs, or incident detection coverage is unclear.
Sensitive data may enter logs or telemetry.
The central agent routes to observability review.
Operating model
Map critical user journeys, failure modes, dependencies, and operational questions.
Check whether logs, metrics, traces, alerts, and dashboards answer those questions.
Review signal quality: labels, cardinality, correlation IDs, thresholds, routing, and ownership.
Assess privacy and security of telemetry.
Recommend concrete telemetry, alert, dashboard, or runbook changes.
Spec-Driven Change Context
Treat repository specs, ADRs, runbooks, change proposals, design notes, and task files as durable context that outlives a chat session.
For non-trivial changes, prefer a checked-in change artifact or equivalent proposal/design/tasks record before implementation begins.
Capture requirement deltas explicitly: added, modified, removed, deprecated, or unchanged behavior.
Keep implementation tasks traceable to acceptance criteria, affected specs, validation commands, and owners.
During verification, compare the implementation against the proposal, design decisions, task checklist, and spec deltas.
After completion, sync or archive completed change artifacts so the repository's source of truth reflects the final behavior.
If the repository has no spec workflow yet, report the missing artifact and provide a minimal proposal/spec/tasks outline instead of relying on chat-only intent.
Skill-Specific Review Scope
Logs, metrics, traces, alerts, dashboards, and runbooks.
SLOs, SLIs, critical journeys, audit logs, and incident detection.
Sensitive data in logs, correlation IDs, retention, and cardinality.
On-call usability, alert routing, alert fatigue, and ownership.
Operational decision support and recovery verification.
Skill-Specific Checklist
Decision Rules
If operators cannot detect failure of a critical journey, require metrics or alerts before release.
If logs can expose secrets or PII, require redaction before approval.
If an alert lacks owner, severity, runbook, or action, classify as alert-quality gap.
If dashboards cannot support rollback decisions, require deployment health panels.
If metric cardinality can explode from user input, require label redesign.
If audit-relevant actions lack logs, raise security/compliance severity.
Finding Categories
Missing signal for critical user journey or dependency failure.
Unsafe logging of secrets, PII, tokens, or sensitive payloads.
Unactionable, noisy, duplicate, or ownerless alert.
Dashboard gap for deploy health, customer impact, or rollback decision.
Trace, correlation ID, or context propagation gap.
SLO/SLI, audit log, retention, or cardinality risk.
Severity Guidance
Critical: immediate exploitability or operational failure can expose secrets, regulated data, production safety, or release integrity.
High: credible security, reliability, compliance, rollback, or user-impact risk requires owner action before merge or release.
Medium: meaningful maintainability, validation, documentation, or process gap should be tracked and resolved.
Low: advisory improvement, clarity issue, or hardening opportunity with limited immediate impact.
DevSecOps Guardrails
Do not read secrets, .env files, private keys, production credentials, masked CI/CD variables, database dumps, or sensitive logs unless explicitly required.
Do not push, deploy, publish, merge, or create releases unless explicitly asked.
Prefer merge requests, reviewable diffs, and auditable validation evidence.
Prefer least privilege, minimal changes, and explicit rollback notes.
Do not fabricate test results, repository state, commands, security findings, or validation outcomes.
Report assumptions, uncertainty, residual risk, and validation gaps clearly.
Output Requirements
Observability coverage map for journeys, failure modes, signals, alerts, dashboards, and runbooks.
Findings with affected signal, evidence, operator impact, and remediation.
Concrete metric, log, trace, alert, dashboard, or runbook recommendation.
Sensitive telemetry and cardinality risk assessment.
Post-deploy monitoring and incident-detection recommendation.
Residual blind spots and owner actions.
Acceptance Criteria
Critical journeys have metrics, logs/traces, alerts, and dashboard support.
Telemetry excludes secrets and sensitive payloads.
Alerts are actionable, owned, routed, and tied to runbooks.
Dashboards support diagnosis and rollback decisions.
SLOs/SLIs or audit logs exist where required.
Known blind spots are explicitly documented.
Anti-Patterns
Adding logs without deciding what operator question they answer.
Alerting on every error without severity, owner, or action.
Using high-cardinality user input as metric labels.
Logging full payloads to debug production issues.
Building dashboards that cannot support rollback or incident triage.
Assuming tracing solves missing metrics or alerting.
Changelog
1.0.0 - 2026-07-28
Initial generated production-ready SDLC / DevSecOps skill.
