helpers/skills/jira-activity/SKILL.md
Summarize Jira ticket activity, including child tickets, to detect stale tickets in the backlog. Use when user asks to review one or more Jira tickets to determine if they are being worked on.
npx skillsauth add opendatahub-io/ai-helpers jira-activityInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Analyze a Jira ticket and its child tickets to produce a staleness report. Useful for triaging Features and Initiatives to determine if they are actively being worked on, slowing down, or dormant.
uv must be installed and available in PATHJIRA_API_TOKEN environment variable must be set with a valid API token for https://redhat.atlassian.netJIRA_EMAIL environment variable must be set with the email address associated with your Atlassian accountThis skill fetches activity data for a Jira ticket and its entire descendant hierarchy (Initiative → Epic → Stories/Tasks), then interprets the results into a staleness report.
Optionally the user may specify a --days N flag to control the lookback window (default: 30 days).
Run the fetch script located at scripts/fetch_jira_activity.py relative to this skill. Execute it directly (not via python) to invoke uv via the shebang:
./scripts/fetch_jira_activity.py <TICKET-KEY> [--days N]
The script outputs JSON to stdout containing the complete hierarchy of issues with levels (0=root, 1=child, 2=grandchild, etc.) including statuses, assignees, recent comments, and changelog entries.
Analyze the JSON output and produce a report with the following sections:
Assign one of these labels based on the activity patterns:
Present the complete hierarchy structure showing:
For each level in the hierarchy, summarize:
For key issues with significant activity, include:
Present as a hierarchical summary or grouped by level.
User: Check activity on RHOAIENG-1234
Assistant: [Runs fetch script, analyzes JSON, produces staleness report]
User: Is AIPCC-500 stale? Look back 60 days.
Assistant: [Runs fetch script with --days 60, produces report]
User: We're triaging RHOAIENG-9999. How active is it?
Assistant: [Detects ticket from context, runs analysis]
development
Run hexora static analysis on a Python package repository to detect suspicious code patterns, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.
development
Inspect recent git history of a Python package repository for suspicious commits touching supply-chain-sensitive files, then triage findings with AI reasoning to produce a structured risk report section.
development
Scan a Python package repository for compiled/binary files using Fromager-style detection and malcontent YARA analysis, then triage findings with deterministic rules and AI reasoning to produce a structured risk report section.
testing
Use this skill to identify non-Red Hat RPM packages installed in container images or on the local machine. For containers, pulls images across multiple architectures and release tags; for local scans, inspects the host directly. Extracts RPM signing metadata and reports packages not signed with the Red Hat GPG key as CSV output. Use when auditing compliance, checking supply-chain provenance, or scanning for third-party RPMs in RHOAI component images.