testland/bug-tracker-workflow
Repairs defect bookkeeping that reports the wrong numbers - a weekly summary showing zero in the top severity band, a 'new defects this week' figure counting items already fixed, duplicates that were never merged, or one script moving issues across several boards whose workflows disagree. Files, transitions, dedupes, and searches bugs through one tracker-agnostic workflow across Jira, Linear, GitHub Issues, and Azure DevOps: authenticate, dedupe-search before creating, classify severity and priority, transition lifecycle states, and wire idempotent CI-driven filing from test failures. Jira Cloud REST API v3 is worked in full in the body (ADF descriptions, runtime transition lookup, JQL triage and duplicate queries, dry-run bulk transitions). Use when tracker data, defect metrics, or cross-board transitions are wrong or need automating.
70
88%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Low
Low-risk findings worth noting
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The bug tracker workflow searches, reads, and comments on issues from external bug tracking platforms (Jira, Linear, GitHub, and Azure DevOps) where outsider-authored bug reports and comments can be ingested.
Where we found it
atlassian.net
domain · 1 site
The plugin fetches Jira issues, searches via JQL, reads bug details, and comments on issues from the user's Jira Cloud tenant at *.atlassian.net, where outsider-authored bug reports and comments can be ingested.
SKILL.md
59
export JIRA_BASE="https://your-tenant.atlassian.net"
api.linear.app
domain · 1 site
The plugin fetches Linear issues, searches for duplicates, reads bug details, and comments on issues via the Linear GraphQL API at api.linear.app, where outsider-authored bug reports and comments can be ingested.
references/linear.md
31
ENDPOINT = "https://api.linear.app/graphql"
api.github.com
domain · 2 sites
The plugin fetches GitHub issues, searches for duplicates via the search API, reads bug details, and comments on issues from api.github.com, where outsider-authored bug reports and comments can be ingested.
references/github-issues.md
24
BASE = f"https://api.github.com/repos/{os.environ['GITHUB_REPO']}"
references/github-issues.md
125
"https://api.github.com/search/issues"
dev.azure.com
domain · 1 site
The plugin fetches Azure DevOps work items, searches via WIQL, reads bug details, and comments on issues from the user's Azure DevOps organization at dev.azure.com, where outsider-authored bug reports and comments can be ingested.
references/azuredevops.md
20
export ADO_ORG="https://dev.azure.com/my-org"
- Audited
- Security analysis