CtrlK
BlogDocsLog inGet started
Tessl Logo

tapd-iteration-plan

TAPD 迭代规划技能。基于"approved"状态的需求池,结合需求依赖关系、size 规模、 优先级进行全局编排,将合适规模的需求规划进入指定迭代。支持新建迭代和已有迭代 重入两种模式,自动控制迭代总规模上限(默认 1000),通过有向无环图(DAG)分析 保证依赖需求优先入迭代。 Use this skill whenever the user mentions 迭代规划, 规划迭代, 编排迭代, iteration planning, 迭代编排, 需求入迭代, 排迭代, 拉迭代, 创建迭代, plan iteration, sprint planning, organize sprint, or any workflow involving TAPD iteration scheduling and story assignment.

72

Quality

90%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Low

Low-risk findings worth noting

SKILL.md
Quality
Evals
Security
Low

W011: Third-party content exposure detected (indirect prompt injection risk).

What this means

The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.

Why it was flagged

The required workflow queries TAPD stories and reads their description fields via `stories_get` to extract dependency relationships, exposing the agent to outsider-authored story descriptions.

Report incorrect finding
Repository
TencentBlueKing/bk-bcs
Audited
Security analysis
Snyk

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.