Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add tupe12334/instinct --skill five-whysgit clone --depth 1 https://github.com/tupe12334/instinctWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tupe12334/instinct/five-whys)<a href="https://agentmods.dev/skills/tupe12334/instinct/five-whys"><img src="https://agentmods.dev/badge/skills/tupe12334/instinct/five-whys/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tupe12334/instinct/five-whys"><img src="https://agentmods.dev/badge/skills/tupe12334/instinct/five-whys.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00025 | $0.01756 |
| Opus 5.5 | $0.00010 | $0.00702 |
| Sonnet 5.5 | $0.00005 | $0.00351 |
| Haiku 4.5 | $0.00003 | $0.00176 |
Grade A, and why
five-whys scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 130 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Five Whys
Overview
The Five Whys is a root-cause analysis technique developed by Taiichi Ohno at Toyota. You start with a visible symptom and ask "Why did this happen?" repeatedly — each answer becomes the subject of the next question — until you reach the systemic cause rather than stopping at the proximate one.
Problem (symptom)
└─ Why? → Cause 1
└─ Why? → Cause 2
└─ Why? → Cause 3
└─ Why? → Cause 4
└─ Why? → ROOT CAUSE (act here)
Five is a guideline, not a rule. Stop when you reach a cause that is actionable and where fixing it would prevent recurrence.
Core Concepts
Symptom vs. Root Cause
The symptom is what you observe; the root cause is the condition that made the symptom inevitable. Fixing a symptom stops this instance; fixing the root cause prevents the class of problem.
The Causal Chain
Each why step must be a direct cause of the step above it — not a parallel factor, not a contributing influence. If you can ask "but also why?" and get a different chain, you may have a branching problem requiring a fishbone diagram instead.
Actionability
A valid root cause must be something a person or team can actually change. "The system is complex" is not actionable. "No one owns monitoring for this service" is.
The "Five" Number
Ohno chose five because most surface-level explanations exhaust themselves in 2–3 whys; the 4th and 5th force you past the obvious. In practice, chains run 3–7 steps depending on domain.
How to Apply
Step 1 — Write a precise problem statement
Do not start with vague language. Bad: "the deployment broke." Good: "The production deployment at 14:32 UTC caused a 23-minute outage for all EU users." Ambiguous problem statements produce ambiguous root causes.
Step 2 — Ask the first "Why?"
What directly caused the problem statement to be true? Write it down. This should be a fact, not a guess — verify with data, logs, or direct observation if needed.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 130 lines · 0 tokens per session scan A 1b52826cb14c
five-whys is a skill published in the GitHub repository tupe12334/instinct (1 stars, last pushed 2mo ago), licensed MIT. It adds 25 tokens to every session and 1,756 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
thinking-scientific-method
When a symptom has several plausible causes, rank falsifiable hypotheses and run the cheapest discriminating observation first; prefer least-assumptive survivors only after evidence fit.
thinking-five-whys-plus
When a fault is localized and the proximate cause is known but the systemic root is not, chain evidence-linked whys with a counterfactual stop and a countermeasure.
thinking-map-territory
When a claim, doc, test, metric, or assumption conflicts with observed behavior, stop theorizing from the map and verify the live code or data; let territory overrule.
linux
Linux administration and networking diagnostics — DNS, load balancing, VPCs, kernel tuning, and connectivity troubleshooting.
chaos
Design, run, and debug Chaos Engineering experiments on Kubernetes using Litmus Chaos v3 and Chaos Mesh v2. Covers fault injection (pod-delete, network-loss, CPU stress, node-drain), steady-state hypothesis probes, GameDay runbooks, scheduled experiments, DORA feedback loop, and RBAC setup. Use when asked to "inject a…
debug
Structured platform troubleshooting — classifies the problem layer, collects evidence, forms a root-cause hypothesis, and proposes a fix with validation and rollback steps.