DevOps Maturity Assessment

Assess DevOps maturity level in organizations, especially cloud-native or cloud-migrating companies. Use when someone asks about DevOps assessment, maturity...

Security Scan

This is an instruction-only DevOps maturity assessment skill that is internally consistent with its stated purpose and does not request credentials, install code, or perform unexpected actions.

Purpose & Capability

The name/description (DevOps maturity assessment) matches the provided materials: a 7-dimension questionnaire, scoring rules, and report template. Nothing in the skill asks for unrelated capabilities (no cloud credentials, no platform access).

Instruction Scope

SKILL.md and references/dimensions.md contain only interactive questions, scoring guidance, and report formatting. The instructions do not direct the agent to read local files, access environment variables, connect to external endpoints, or exfiltrate data. Note: when used the agent will collect organizational responses (potentially sensitive), so treat that data accordingly.

Install Mechanism

No install spec and no code files beyond markdown → lowest-risk model (instruction-only). Nothing is downloaded, no archives to extract, and no binaries required.

Credentials

The skill does not request environment variables, credentials, or config paths. All required inputs are interview answers and organizational metadata, which are appropriate for an assessment tool.

Persistence & Privilege

Flags show default invocation behavior (not always:true). The skill does not request persistent system presence or modify agent/system configuration. Autonomous invocation is possible (platform default) but not combined with other red flags here.

Assessment

This skill appears to be what it says: a questionnaire and scoring model for DevOps maturity. Before installing or using it, keep these simple precautions: do not paste secrets or credentials into assessment answers; treat collected organizational metrics as potentially sensitive and store reports in your own secure location; review and, if needed, adjust scoring weights or wording to match your organization's context; if you expect the agent to run autonomously, review how it will prompt users to avoid accidental disclosure of confidential data.

Interactive assessment of an organization's DevOps maturity across 7 dimensions, producing a scored report with actionable recommendations.

Assessment Workflow

1. Introduce the assessment — explain it takes ~10 minutes, covers 7 dimensions
2. Ask questions dimension by dimension — 3-4 questions per dimension
3. Score each dimension 0-6 based on the maturity model
4. Generate the final report with scores, visualization, and recommendations
5. Offer to deep-dive into any weak dimension

Maturity Model (7 levels)

Level	Name	Key Indicator
0	Legacy	No cloud, no automation
1	Ad Hoc	First experiments, no strategy
2	Opportunistic	Point successes, inconsistent approaches
3	Systematic	Documented processes, org-wide acceptance
4	Measured	KPIs defined, data-driven management
5	Optimized	Continuous improvement from collected data
6	Advanced Cloud	Full cloud, proactive optimization

7 Assessment Dimensions

For detailed questions and scoring criteria per dimension, read references/dimensions.md.

Quick overview:

1. CI/CD & Deployment — frequency, lead time, pipeline automation
2. Infrastructure as Code — IaC coverage, testing, drift detection
3. Observability — monitoring, logging, tracing, SLO/SLI
4. Security (DevSecOps) — shift-left, scanning, secrets management
5. Culture & Organization — Dev+Ops collaboration, blameless postmortems
6. FinOps — cost visibility, optimization, per-team budgeting
7. Reliability (SRE) — MTTR, change failure rate, auto-remediation

Scoring Rules

• Score each dimension independently (0-6)
• Overall score = floor of weighted average (CI/CD and Reliability weighted 1.5x)
• Map overall score to maturity level name
• Flag any dimension scoring 2+ levels below overall as "critical gap"

Report Format

Generate a report like this:

══════════════════════════════════════════
   DevOps Maturity Assessment Report
   Organization: [name]
   Date: [date]
══════════════════════════════════════════

   Overall Level: [X] — [Level Name]

   CI/CD & Deployment:    [bar] X/6
   Infrastructure as Code:[bar] X/6
   Observability:         [bar] X/6
   Security (DevSecOps):  [bar] X/6
   Culture & Organization:[bar] X/6
   FinOps:                [bar] X/6
   Reliability (SRE):     [bar] X/6

──────────────────────────────────────────
   Strengths:
   • [top 2-3 strong areas with specifics]

   Critical Gaps:
   • [dimensions 2+ levels below average]

   Top 3 Recommendations:
   1. [specific, actionable recommendation]
   2. [specific, actionable recommendation]
   3. [specific, actionable recommendation]

   Benchmark: Your org scores in the
   [top/middle/bottom] third of assessed
   organizations.
══════════════════════════════════════════

Use bar characters: ████░░ for visual scoring.

After the Report

• Offer to deep-dive into the weakest dimension
• Suggest a re-assessment timeline (quarterly recommended)
• For recommendations, reference DORA State of DevOps findings when relevant