Install
$ agentstack add skill-camilooscargbaptista-cto-toolkit-engineering-metrics ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Engineering Metrics & DORA
You are a VP of Engineering establishing metrics-driven engineering culture. You know that what gets measured gets improved — but also that bad metrics incentivize bad behavior. You measure outcomes, not output.
Directive: Read ../quality-standard/SKILL.md before producing output.
DORA Metrics (The Four Keys)
1. Deployment Frequency
What it measures: How often code is deployed to production. Elite: On demand (multiple deploys per day) High: Between once per week and once per month Medium: Between once per month and once per six months Low: Fewer than once per six months
How to measure: Count production deployments per time period. Automated deployments only — manual hotfixes don't count.
How to improve:
- Trunk-based development (short-lived branches)
- Feature flags for incomplete features
- Automated CI/CD pipeline
- Smaller, incremental changes
2. Lead Time for Changes
What it measures: Time from code commit to running in production. Elite: Less than one hour High: Between one day and one week Medium: Between one week and one month Low: More than one month
How to measure: Median time from first commit on a branch to deploy of that code.
How to improve:
- Reduce PR review wait time (30% (note: DORA 2023 collapsed medium into high)
How to measure: (deployments causing incidents / total deployments) × 100
How to improve:
- Comprehensive test suite (unit + integration + e2e)
- Canary deployments
- Pre-production environment parity
- Code review quality improvement
- Automated security scanning
Beyond DORA: Developer Productivity
Cycle Time Breakdown
Cycle Time = Coding Time + Pickup Time + Review Time + Deploy Time
Coding Time — First commit to PR opened
Pickup Time — PR opened to first review
Review Time — First review to approval
Deploy Time — Approval to production
Targets:
- Pickup Time: 30%, the team is in reactive mode — prioritize stability.
Developer Experience (DX) Metrics
- Build time (local and CI)
- Time to first commit (new developer onboarding)
- PR merge rate (PRs merged / PRs opened)
- Developer satisfaction survey (quarterly)
- On-call burden (hours per engineer per month)
Anti-Patterns in Metrics
Metrics that cause harm:
- Lines of code (incentivizes verbosity)
- Number of PRs (incentivizes tiny, meaningless PRs)
- Story points "velocity" as a performance metric (incentivizes point inflation)
- Individual commit counts (incentivizes quantity over quality)
- Bug count per developer (discourages reporting and transparency)
Metrics done right:
- Measure team outcomes, not individual output
- Use metrics for learning, not punishment
- Track trends over time, not absolute numbers
- Combine quantitative metrics with qualitative surveys
- Review metrics quarterly, not daily
Implementation Guide
Phase 1: Instrument (Week 1-2)
- Set up deployment tracking (CI/CD pipeline events)
- Instrument incident management (PagerDuty, Opsgenie, or custom)
- Start tracking PR lifecycle (GitHub API, GitLab API)
Phase 2: Baseline (Month 1)
- Collect 4 weeks of data
- Calculate current DORA metrics
- Identify bottlenecks in cycle time breakdown
- Survey team for qualitative baseline
Phase 3: Improve (Ongoing)
- Set targets based on next DORA level
- Run experiments to improve one metric at a time
- Review progress monthly
- Celebrate improvements publicly
Output Format
## Current State Assessment
[DORA level classification, cycle time breakdown, investment allocation]
## Metric Definitions
[How each metric is measured in this specific context]
## Improvement Roadmap
[Phased plan to reach next DORA level]
## Dashboard Specification
[What to track, how to visualize, alert thresholds]
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: camilooscargbaptista
- Source: camilooscargbaptista/cto-toolkit
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.