cuioss/ext-triage-js
marketplace/bundles/pm-dev-frontend/skills/ext-triage-js/SKILL.md
Triage extension for JavaScript findings during plan-finalize phase
$ install --global
skillsauthnpx skillsauth add cuioss/plan-marshall ext-triage-jsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jun 10, 2026, 3:23 AM47.1s4 files scanned
SKILL.md
- name:
- ext-triage-js
- description:
- Triage extension for JavaScript findings during plan-finalize phase
- user-invocable:
- false
- implements:
- plan-marshall:extension-api/standards/ext-point-triage
JavaScript Triage Extension
Provides decision-making knowledge for triaging JavaScript findings during the finalize phase.
Purpose
This skill is a triage extension loaded by the plan-finalize workflow skill when processing JavaScript-related findings. It provides domain-specific knowledge for deciding whether to fix, suppress, or accept findings.
Key Principle: This skill provides knowledge, not workflow control. The finalize skill owns the process.
When This Skill is Loaded
Loaded via resolve-workflow-skill-extension --domain javascript --type triage during finalize phase when:
- ESLint reports rule violations
- Jest test failures occur
- Prettier formatting issues are detected
- Stylelint reports CSS issues
- PR review comment disposition is required (FIX, REPLY-AND-RESOLVE, or ESCALATE on bot review threads)
Standards
| Document | Purpose | |----------|---------| | suppression.md | JavaScript suppression syntax (eslint-disable) | | severity.md | JavaScript-specific severity guidelines and decision criteria | | pr-comment-disposition.md | PR review comment disposition (FIX / REPLY-AND-RESOLVE / ESCALATE) for JavaScript and CSS |
Quick Reference
Suppression Methods
| Finding Type | Syntax |
|--------------|--------|
| ESLint rule | // eslint-disable-next-line rule-name |
| ESLint block | /* eslint-disable rule-name */ |
| Prettier | Not suppressible (fix or configure) |
| Stylelint | /* stylelint-disable rule-name */ |
Decision Guidelines
| Severity | Default Action | |----------|----------------| | error | Fix (blocks build/CI) | | warn | Fix or suppress with justification | | off | N/A (disabled rule) |
Acceptable to Accept
- Generated code in
**/generated/**,**/dist/** - Legacy JavaScript files with tracked plan to address
- Test mocks requiring flexibility
Related Documents
pm-dev-frontend:javascript- Core JavaScript patterns
Related Skills
cuioss/manage-change-ledger
development
VerifiedTrustedCommunity
The single append-only change-ledger — one worktree_sha-stamped substrate for kind=build and kind=change entries — plus the first-class worktree-sha freshness API
5SKILL.mdUpdated Jun 13, 2026
cuioss/ref-ascii-diagrams
development
VerifiedTrustedCommunity
Authoring standards for ASCII box diagrams in skill and doc source — box-drawing conventions, right-border alignment, and a deterministic check/fix validator over fenced/literal code blocks in .md and .adoc files
5SKILL.mdUpdated Jun 10, 2026
cuioss/recipe-verify-ascii-diagrams
testing
VerifiedTrustedCommunity
Recipe for verifying and fixing alignment of ASCII box diagrams across .md skill source and .adoc documentation, one deliverable per offending file
5SKILL.mdUpdated Jun 10, 2026
cuioss/manage-terminal-title
development
VerifiedTrustedCommunity
Pure platform-agnostic terminal-title composition consumed by platform-runtime via PYTHONPATH
5SKILL.mdUpdated Jun 10, 2026