testland/bug-tracker-workflow
Files, transitions, and searches bugs in the team's tracker - Jira, Linear, GitHub Issues, or Azure DevOps - through one tracker-agnostic workflow: authenticate, dedupe-search before creating, create with severity/priority classification, transition lifecycle states, and wire idempotent CI-driven filing from test failures. Jira Cloud REST API v3 is worked in full in the body (ADF descriptions, runtime transition lookup, JQL triage and duplicate queries, dry-run bulk transitions); Linear's GraphQL API (issueCreate/issueUpdate, workflowStates resolved by type, the 0-4 priority enum), GitHub Issues REST (open/closed + state_reason, label-based severity/priority), and Azure DevOps Work Item Tracking (JSON Patch, WIQL, process-template states) each have a deep reference. Use when programmatically managing the bug lifecycle on any of the four trackers: creating from CI failures, triaging queues, transitioning states, or dedupe-searching.
70
88%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The workflow searches and reads issues from external bug trackers (Jira, Linear, GitHub Issues, and Azure DevOps) where outsider-authored descriptions and comments can be ingested.
Where we found it
atlassian.net
domain · 1 site
The plugin fetches Jira issues, transitions, and search results from the tenant's Jira Cloud instance at *.atlassian.net, ingesting outsider-authored bug descriptions and comments.
SKILL.md
59
export JIRA_BASE="https://your-tenant.atlassian.net"
api.linear.app
domain · 1 site
The plugin fetches Linear issues, workflow states, and search results from api.linear.app, ingesting outsider-authored bug descriptions and comments.
references/linear.md
31
ENDPOINT = "https://api.linear.app/graphql"
api.github.com
domain · 2 sites
The plugin fetches GitHub issues, search results, and comments from api.github.com, ingesting outsider-authored bug descriptions and comments.
references/github-issues.md
24
BASE = f"https://api.github.com/repos/{os.environ['GITHUB_REPO']}"
references/github-issues.md
125
"https://api.github.com/search/issues"
dev.azure.com
domain · 1 site
The plugin fetches Azure DevOps work items, WIQL search results, and comments from dev.azure.com, ingesting outsider-authored bug descriptions and comments.
references/azuredevops.md
20
export ADO_ORG="https://dev.azure.com/my-org"
- Audited
- Security analysis