testland/bug-tracker-workflow
Use for any question or task about a bug tracker workflow in Jira, Linear, GitHub Issues or Azure DevOps, including severity vs priority, filing bugs from failing CI tests without duplicates, and defect counts that are wrong (missing top-severity bugs, fixed items counted as new): dedupe before filing, lifecycle, transitions and CI filing.
86%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The required CI-filing and triage workflow searches and reads Jira, GitHub Issues, Azure DevOps, and Linear tickets (including titles, descriptions, and comments that outsiders can submit into the queues), so the agent ingests outsider-authored text without first selecting a specific item.
Where we found it
atlassian.net
domain · 1 site
The plugin searches Jira via JQL (search_jql) and reads issue titles, descriptions, and comments from the Jira Cloud REST API at runtime; outsiders can submit tickets and comments into Jira queues that the plugin then ingests.
SKILL.md
59
export JIRA_BASE="https://your-tenant.atlassian.net"
api.linear.app
domain · 1 site
The plugin searches Linear via GraphQL (find_dupes, issues query) and reads issue titles, states, and priorities from the Linear API at runtime; outsiders can submit issues and comments into Linear queues that the plugin then ingests.
references/linear.md
31
ENDPOINT = "https://api.linear.app/graphql"
api.github.com
domain · 2 sites
The plugin searches GitHub Issues via the Search API (search_issues) and reads issue titles, bodies, and comments from the GitHub REST API at runtime; outsiders can submit issues and comments into GitHub repositories that the plugin then ingests.
references/github-issues.md
24
BASE = f"https://api.github.com/repos/{os.environ['GITHUB_REPO']}"
references/github-issues.md
125
"https://api.github.com/search/issues",
dev.azure.com
domain · 1 site
The plugin searches Azure DevOps via WIQL (wiql_search) and reads work item titles, descriptions, and comments from the Azure DevOps REST API at runtime; outsiders can submit bugs and comments into Azure DevOps queues that the plugin then ingests.
references/azuredevops.md
20
export ADO_ORG="https://dev.azure.com/my-org"
- Audited
- Security analysis