bug-triage — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited bug-triage (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Bug ticket 的診斷入口:讀票、定位 project、找 root cause、讓 RD 確認,最後把已確認分析寫回 JIRA,交給 breakdown 派工。
bug-triage 只做 diagnosis。不估點、不拆 task、不寫 Design Doc、不建 branch、不修 code、 不開 PR。這些分別屬於 breakdown 與 engineering。
若 ticket 不是 Bug,停止並路由:Story/Task 走 breakdown 或 engineering,Epic 走 refinement 再 breakdown。若 JIRA 已有 [ROOT_CAUSE],詢問要重新分析或直接派工。 Bug 的 planning handoff 仍以 confirmed RCA 為前提,但 direct-to-engineering 只在已存在 authoritative task work order 時合法;沒有 work order 時,下一步一律是 /auto-pass {BUG_KEY}。
| Situation | Load |
|---|---|
| Any bug | bug-triage-entry-flow.md, project-mapping.md, workspace-config-reader.md |
| AC verification failure bug | bug-triage-acfail-flow.md, pipeline-handoff.md, handoff-artifact.md, worktree-dispatch-paths.md |
| Root cause analysis | bug-triage-root-cause-flow.md, explore-pattern.md, repo-handbook.md, planning-worktree-isolation.md as needed |
| Confirmation and JIRA write | bug-triage-confirm-handoff-flow.md, workspace-language-policy.md, external-write-gate.md |
Explorer sub-agent dispatch 必須注入 sub-agent-roles.md 的 Completion Envelope。Full path 與 AC-FAIL path 的 raw evidence 寫入 handoff artifact,供 downstream engineering on-demand 讀取。
project-mapping.md 與 workspace config 找 project,先讀 company handbook index +linked docs,再讀 repo handbook index + linked docs。
[VERIFICATION_FAIL],走 AC-FAIL scoped path。workspace-language-policy.md/ external write gate blocking validation;通過後才將 [ROOT_CAUSE] / [IMPACT] / [PROPOSED_FIX] 寫成 JIRA comment。
/auto-pass {BUG_KEY};只有已存在 authoritative task work order 時才可提示 做 {TICKET}。
workspace-language-policy.md或 external write gate,且先有 local final-comment artifact。Durable final-comment artifact 應寫入 {source_container}/jira-comments/YYYYMMDD-root-cause.md;只有真正 temporary body file 可放在 /tmp,且 closeout 前必須刪除。
docs-manager/src/content/docs/specs/**/*.md,必須走 specs-bound emit contract:frontmatter 至少包含 title、description、 draft: true、sidebar.hidden: true,且 producer 對應 scripts/lib/evidence-producers.json 的 bug-triage RCA entry。
explore-pattern.md,只寫 workspace-owned handbook source。SKILL.md 是 documentation pointer,不是 executable writer。寫入 specs-bound artifact(例如 {source_container}/jira-comments/*root-cause*.md)的 writer authority 來自 producer-env + scripts/lib/evidence-producers.json registry。
寫 RCA comment artifact 前必須 export POLARIS_SKILL_WRITER=bug-triage,再呼叫 Claude Write / Edit / MultiEdit:
export POLARIS_SKILL_WRITER=bug-triage
# 然後使用 Write tool 寫入 docs-manager/src/content/docs/specs/**/jira-comments/*root-cause*.mdPOLARIS_SKILL_WRITER 只允許設成 bug-triage;no-direct-evidence-write hook 會交叉比對寫入路徑是否屬於 bug-triage owning_skill entry,不符即 deny。
cat > specs/...root-cause.md <<'EOF')寫 RCA artifact;Bashheredoc 不走 hook,繞過 producer-env 認證與 specs-bound emit contract。
/tmp body 不受此規則約束(不屬於 specs-bound surface),但 durableartifact 落到 docs-manager/src/content/docs/specs/** 一律走 producer-env 路徑。
輸出 ticket、root cause confirmed status、JIRA comment status、proposed fix scope、 evidence artifact path(fast path 可為 none)、next command。next command 預設是 /auto-pass {BUG_KEY};只有已存在 authoritative task work order 時才是 做 {TICKET}。
完成 write flow 後必須呼叫 scripts/check-feedback-signals.sh,再執行 Post-Task Reflection。
Execute post-task-reflection-checkpoint.md before reporting completion.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.