triage-issue
triage-issue,来自 aden-hive/hive 的 agent 技能。
它会碰到什么
这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。
技能内容
Triage Issue Skill
Analyze a GitHub issue, verify claims against the codebase, and close invalid issues with a technical response.
Trigger
User provides a GitHub issue URL or number, e.g.:
/triage-issue 1970/triage-issue https://github.com/adenhq/hive/issues/1970
Workflow
Step 1: Fetch Issue Details
gh issue view <number> --repo adenhq/hive --json title,body,state,labels,author
Extract:
- Title
- Body (the claim/bug report)
- Current state
- Labels
- Author
If issue is already closed, inform user and stop.
Step 2: Analyze the Claim
Read the issue body and identify:
- The core claim - What is the user asserting?
- Technical specifics - File paths, function names, code snippets mentioned
- Expected behavior - What do they think should happen?
- Severity claimed - Security issue? Bug? Feature request?
Step 3: Investigate the Codebase
For each technical claim:
- Find the referenced code using Grep/Glob/Read
- Understand the actual implementation
- Check if the claim accurately describes the behavior
- Look for related tests, documentation, or design decisions
Step 4: Evaluate Validity
Categorize the issue as one of:
| Category | Action |
|----------|--------|
| Valid Bug | Do NOT close. Inform user this is a real issue. |
| Valid Feature Request | Do NOT close. Suggest labeling appropriately. |
| Misunderstanding | Prepare technical explanation for why behavior is correct. |
| Fundamentally Flawed | Prepare critique explaining the technical impossibility or design rationale. |
| Duplicate | Find the original issue and prepare duplicate notice. |
| Incomplete | Prepare request for more information. |
Step 5: Draft Response
For issues to be closed, draft a response that:
- Acknowledges the concern - Don't be dismissive
- Explains the actual behavior - With code references
- Provides technical rationale - Why it works this way
- References industry standards - If applicable
- Offers alternatives - If there's a better approach for the user
Use this template:
## Analysis
[Brief summary of what was investigated]
## Technical Details
[Explanation with code references]
## Why This Is Working As Designed
[Rationale]
## Recommendation
[What the user should do instead, if applicable]
---
*This issue was reviewed and closed by the maintainers.*
Step 6: User Review
Present the draft to the user with:
## Issue #<number>: <title>
**Claim:** <summary of claim>
**Finding:** <valid/invalid/misunderstanding/etc>
**Draft Response:**
<the markdown response>
---
Do you want me to post this comment and close the issue?
Use AskUserQuestion with options:
- "Post and close" - Post comment, close issue
- "Edit response" - Let user modify the response
- "Skip" - Don't take action
Step 7: Execute Action
If user approves:
# Post comment
gh issue comment <number> --repo adenhq/hive --body "<response>"
# Close issue
gh issue close <number> --repo adenhq/hive --reason "not planned"
Report success with link to the issue.
Important Guidelines
- Never close valid issues - If there's any merit to the claim, don't close it
- Be respectful - The reporter took time to file the issue
- Be technical - Provide code references and evidence
- Be educational - Help them understand, don't just dismiss
- Check twice - Make sure you understand the code before declaring something invalid
- Consider edge cases - Maybe their environment reveals a real issue
Example Critiques
Security Misunderstanding
> "The claim that secrets are exposed in plaintext misunderstands the encryption architecture. While SecretStr is used for logging protection, actual encryption is provided by Fernet (AES-128-CBC) at the storage layer. The code path is: serialize → encrypt → write. Only encrypted bytes touch disk."
Impossible Request
> "The requested feature would require [X] which violates [fundamental constraint]. This is not a limitation of our implementation but a fundamental property of [technology/protocol]."
Already Handled
> "This scenario is already handled by [code reference]. The reporter may be using an older version or misconfigured environment."
想直接用这个技能?
本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。