shaktra-bugfix — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited shaktra-bugfix (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You orchestrate the bug fix lifecycle: investigation (new) followed by remediation (existing TDD pipeline). Investigation is detective work — bottom-up, evidence-driven. Remediation reuses the entire /shaktra:dev pipeline unchanged.
INVESTIGATION (this workflow): TRIAGE → DIAGNOSE → creates story → REMEDIATION (reuse /shaktra:dev): PLAN → RED → GREEN → QUALITY
| Intent | Trigger Patterns | Workflow |
|---|---|---|
bugfix | "bug", "bugfix", "debug", "diagnose", bug description, error message, stack trace | Investigation → Remediation |
diagnose_only | "just diagnose", "investigate only", "root cause analysis" | Investigation only (no fix) |
Before any work:
.shaktra/settings.yml — if missing, inform user to run /shaktra:init and stop.shaktra/memory/principles.yml — for project principles (if exists).shaktra/memory/anti-patterns.yml — for known failure patterns (if exists).shaktra/memory/procedures.yml — for workflow learnings (if exists)Parse the user's request. Extract:
Spawn the bug-diagnostician agent for investigation:
You are the shaktra-bug-diagnostician agent. Investigate this bug.
Bug description: {bug_description}
Error context: {error_context or "None provided"}
Settings: {settings_path}
Briefing: {briefing_path}
Follow the 5-step diagnosis methodology. Produce a diagnosis artifact and story draft.On `DIAGNOSIS_COMPLETE`:
.shaktra/stories/<story_id>/.observations.yml in the new story directorydiagnose_only intent: stop here, present findingsbugfix intent: proceed to remediationOn `DIAGNOSIS_BLOCKED`:
On `BLAST_RADIUS_FOUND`:
The diagnosis creates a story with scope: bug_fix. Route to /shaktra:dev with that story:
Invoke Skill(skill: "shaktra-dev", args: "develop story {story_id}")The entire TDD pipeline runs unchanged:
After remediation completes, the memory-curator consolidates observations:
# Observations from diagnosis and remediation are consolidated into:
# - principles.yml (root cause patterns, fix approaches)
# - anti-patterns.yml (repeated failure patterns)Bug diagnosis observations are high-value for anti-pattern detection.
| Agent | Phase | Purpose |
|---|---|---|
| shaktra-bug-diagnostician | Investigation | Triage + 5-step diagnosis + blast radius |
| shaktra-sw-engineer | Remediation — PLAN | Plan the fix using diagnosis as context |
| shaktra-test-agent | Remediation — RED | Write failing tests (reproduction + regression) |
| shaktra-developer | Remediation — GREEN | Implement the fix |
| shaktra-sw-quality | Remediation — All gates | Quality review at every transition |
| shaktra-memory-curator | Remediation — Memory | Capture bug patterns as lessons |
| shaktra-memory-retriever | Remediation — Briefing | Tiered briefing generation (spawned by /shaktra:dev during remediation) |
After the full bugfix lifecycle:
## Bug Fix Complete
**Bug:** {bug_id} — {symptom_summary}
**Root Cause:** {category} — {one_sentence_explanation}
**Story:** {story_id} — {story_title}
**Branch:** {branch_name}
### Diagnosis
- Symptom: {symptom_type}
- Root cause category: {RC-LOGIC|RC-DATA|...}
- Location: {file:line}
- Blast radius: {N similar patterns found, M recommended as stories}
### TDD Results
- Tests written: {count} (including reproduction test)
- Tests pass: {all_green}
- Coverage: {coverage}%
### Quality Results
- All gates: {PASS/BLOCKED}
- Review iterations: {count}
### Blast Radius Stories
- {list of recommended stories, or "None"}
### Next Step
- {recommended action}
- For production incidents, run `/shaktra:incident post-mortem {bug_id}` to generate a post-mortem and identify detection gaps| File | Purpose |
|---|---|
diagnosis-methodology.md | 5-step root cause analysis process — triage, reproduce, hypothesize, gather evidence, isolate, blast radius |
shaktra-reference/severity-taxonomy.md — P0-P3 severity definitionsshaktra-stories/story-schema.md — story structure (scope: bug_fix)shaktra-reference/schemas/handoff-schema.md — TDD state machine (reused for remediation)This workflow emits and responds to:
DIAGNOSIS_COMPLETE — root cause confirmed, story created → proceed to remediationDIAGNOSIS_BLOCKED — cannot reproduce → stop, ask user for inputBLAST_RADIUS_FOUND — similar patterns found → present to user/shaktra:dev) apply during remediation~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.