error-analysis

SKILL.md

Error Analysis

Guide the user through reading LLM pipeline traces and building a catalog of how the system fails.

Overview

Collect ~100 representative traces

Read each trace, judge pass/fail, and note what went wrong

Group similar failures into categories

Label every trace against those categories

Compute failure rates to prioritize what to fix

Core Process

Step 1: Collect Traces

Capture the full trace: input, all intermediate LLM calls, tool uses, retrieved documents, reasoning steps, and final output.

Target: ~100 traces. This is roughly where new traces stop revealing new kinds of failures. The number depends on system complexity.
From real user data (preferred):

Small volume: random sample

Large volume: sample across key dimensions (query type, user segment, feature area)

Use embedding clustering (K-means) to ensure diversity

From synthetic data (when real data is sparse):

Use the generate-synthetic-data skill

Run synthetic queries through the full pipeline and capture complete traces

Step 2: Read Traces and Take Notes

Present each trace to the user. For each one, ask: did the system produce a good result? Pass or Fail.

For failures, note what went wrong. Focus on the first thing that went wrong in the trace — errors cascade, so downstream symptoms disappear when the root cause is fixed. Don't chase every issue in a single trace.

Write observations, not explanations. "SQL missed the budget constraint" not "The model probably didn't understand the budget."

Template:

| Trace ID | Trace | What went wrong | Pass/Fail |
|----------|-------|-----------------|-----------|
| 001      | [full trace] | Missing filter: pet-friendly requirement ignored in SQL | Fail |
| 002      | [full trace] | Proposed unavailable times despite calendar conflicts | Fail |
| 003      | [full trace] | Used casual tone for luxury client; wrong property type | Fail |
| 004      | [full trace] | - | Pass |

Heuristics:

Do NOT start with a pre-defined failure list. Let categories emerge from what the user actually sees.

If the user is stuck articulating what feels wrong, prompt with common failure types: made-up facts, malformed output, ignored user requirements, wrong tone, tool misuse.

Step 3: Group Failures into Categories

After reviewing 30-50 traces, start grouping similar notes into categories. Don't wait until all 100 are done — grouping early helps sharpen what to look for in the remaining traces. The categories will evolve. The goal is names that are specific and actionable, not perfect.

Read through all the failure notes

Group similar ones together

Split notes that look alike but have different root causes

Give each category a clear name and one-sentence definition

When to split vs. group:

Split these (different root causes):

"Made up property features (solar panels)" vs. "Made up client activity (scheduled a tour never requested)" — one fabricates external facts, the other fabricates user intent.

Group these (same root cause):

"Missing bedroom count filter" + "Missing pet-friendly filter" + "Missing price range filter" → Missing Query Constraints

LLM-assisted clustering (use only after the user has reviewed 30-50 traces):

Here are failure annotations from reviewing LLM pipeline traces.
Group similar failures into 5-10 distinct categories.
For each category, provide:
- A clear name
- A one-sentence definition
- Which annotations belong to it

Annotations:
[paste annotations]

Always review LLM-suggested groupings with the user. LLMs cluster by surface similarity (e.g., grouping "app crashes" and "login is slow" because both mention login).

Aim for 5-10 categories that are:

Distinct (each failure belongs to one category)

Clear enough that someone else could apply them consistently

Actionable (each points toward a specific fix)

Step 4: Label Every Trace

Go back through all traces and apply binary labels (pass/fail) for each failure category. Each trace gets a column per category. Use whatever tool the user prefers — spreadsheet, annotation app (see build-review-interface), or a simple script.

Step 5: Compute Failure Rates

failure_rates = labeled_df[failure_columns].sum() / len(labeled_df)
failure_rates.sort_values(ascending=False)

The most frequent failure category is where to focus first.

Step 6: Decide What to Do About Each Failure

Work through each category with the user in this order:

Can we just fix it? Many failures have obvious fixes that don't need an evaluator at all:

The prompt never mentioned the requirement. Example: the LLM never includes photo links in emails because the prompt never asked for them. Add the instruction.

A tool is missing or misconfigured. Example: the user wants to reschedule but there's no rescheduling tool exposed to the LLM. Add the tool.

An engineering bug in retrieval, parsing, or integration. Fix the code.

If a clear fix resolves the failure, do that first. Only consider an evaluator for failures that persist after fixing.

Is an evaluator worth the effort? Not every remaining failure needs one. Building and maintaining evaluators has real cost. Ask the user:

Does this failure happen frequently enough to matter?

What's the business impact when it does happen? A rare failure that causes revenue loss may outrank a frequent failure that's merely annoying.

Will this evaluator actually get used to iterate on the system, or is it checkbox work?

Reserve evaluators for failures the user will iterate on repeatedly. Start with the highest-frequency, highest-impact category.

For failures that warrant an evaluator: prefer code-based checks (regex, parsing, schema validation) for anything objective. Use write-judge-prompt only for failures that require judgment. Critical requirements (safety, compliance) may warrant an evaluator even after fixing the prompt, as a guardrail.

Step 7: Iterate

Expect 2-3 rounds of reviewing and refining categories. After each round:

Merge categories that overlap

Split categories that are too broad

Clarify definitions where the user would hesitate

Re-label traces with the refined categories

Stopping Criteria

Stop reviewing when new traces aren't revealing new kinds of failures. Roughly: ~100 traces reviewed with no new failure types appearing in the last 20. The exact number depends on system complexity.

Trace Sampling Strategies

When production volume is high, use a mix:

Strategy
When to Use
Method

Random
Default starting point
Sample uniformly from recent traces

Outlier
Surface unusual behavior
Sort by response length, latency, tool call count; review extremes

Failure-driven
After guardrail violations or user complaints
Prioritize flagged traces

Uncertainty
When automated judges exist
Focus on traces where judges disagree or have low confidence

Stratified
Ensure coverage across user segments
Sample within each dimension

Anti-Patterns

Brainstorming failure categories before reading traces. Read first, categorize what you find.

Starting with pre-defined categories. A fixed list causes confirmation bias. Let categories emerge.

Skipping the user for initial review. The user must review the first 30-50 traces to ground categories in domain knowledge.

Using generic scores as categories. "Hallucination score," "helpfulness score," "coherence score" are not grounded in the application's actual failure modes.

Building evaluators before fixing obvious problems. Fix prompt gaps, missing tools, and engineering bugs first.

Treating this as a one-time activity. Re-run after every significant change: new features, prompt rewrites, model switches, production incidents.