skills/team/triage-issue/SKILL.md
Triages a GitHub Issue or bug report: classifies severity, identifies the likely root cause area, suggests reproduction steps, and recommends priority and owner. Use when asked to "triage this issue", "assess this bug", "classify this report", or given a bug report to evaluate. Ported from https://github.com/mattpocock/skills (Matt Pocock).
npx skillsauth add michaelalber/ai-toolkit triage-issueInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Triage the provided issue or bug report.
### Triage: [Issue Title]
**Severity:** Critical | High | Medium | Low
**Type:** Bug | Regression | Performance | UX | Docs | Security
**Reproducible:** Yes | No | Unknown
**Affected area:** [module / feature / layer]
**Likely root cause:**
[1–2 sentences identifying the probable failure point]
**Reproduction steps:**
1. [step]
2. [step]
Expected: [X] — Actual: [Y]
**Priority:** P0 / P1 / P2 / P3
**Priority reason:** [why this priority, not higher or lower]
**Suggested owner:** [team or role, not a specific person]
**Suggested approach:** [1–2 sentence direction — not a full solution]
See references/severity-matrix.md for severity and priority definitions.
See references/root-cause-taxonomy.md for common root cause categories.
development
Interviews the user relentlessly about a plan, decision, or idea — one question at a time, each with a recommended answer. Shared engine behind "grill-me" and "grill-with-docs". Use on any "grill" trigger phrase or to stress-test thinking. Do NOT use to build the plan; it ends at shared understanding, not implementation.
testing
Runs a relentless interview to sharpen a plan or design, capturing the decisions as ADRs and a glossary along the way. Use when the user wants to be grilled AND wants the session to leave durable domain documentation behind. Do NOT use for a throwaway stress-test with no artifacts; use grill-me instead.
tools
OWASP-based security review of Vue/TypeScript front-ends. Detects framework (Vite/Vue CLI/Nuxt), entry points, and data flows; scans the OWASP Top 10 (2025) mapped to Vue client-side risks (raw-HTML XSS via v-html, URL/protocol injection, bundled secrets, insecure token storage, dependency CVEs, missing CSP, open redirects, router guard bypass); emits an exec summary plus graded findings. Use to audit Vue for vulnerabilities. Not for architecture grading (vue-architecture-checklist).
tools
Analyzes legacy Vue codebases and produces actionable modernization plans. Primary migration paths include Options API to Composition API, Vue 2 to Vue 3, Vue CLI to Vite, JavaScript to TypeScript, Vue Test Utils/Karma/Mocha to Vitest + Vue Testing Library, legacy Vuex to Pinia, and removed-in-Vue-3 pattern cleanup (filters, event bus, `$listeners`). Does NOT perform the migration — assesses, quantifies risk, and plans.