bug-triage-playbook

Fetch and inspect allowlisted Jenkins console, API, and ZIP artifacts with bounded limits.

Updated May 18, 2026
One-click install
npx skills add https://github.com/Joey-Tools/codex-private-workflows --skill bug-triage-playbook-joey-tools
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bug-triage-playbook
Source: https://github.com/Joey-Tools/codex-private-workflows/tree/main/personal_codex/skills/bug-triage-playbook
Command: npx skills add https://github.com/Joey-Tools/codex-private-workflows --skill bug-triage-playbook-joey-tools

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve? Diagnosing CI failures requires pulling console logs, API responses, and build artifact ZIPs from a private Jenkins server, but doing this with raw curl or unbounded scripts risks leaking credentials, following unsafe redirects, exhausting memory on huge archives, or overwriting existing files. This Skill provides one fixed-policy helper that transports and inspects those artifacts under strict authentication, redirect, size, and time ceilings. ## Core Features & Use Cases - Bounded remote access: Probe URL metadata, view bounded text with grep/head/tail selection, or fetch artifacts to a new file, restricted to an allowlisted HTTPS host with named auth profiles and same-origin redirect validation. - Safe ZIP inspection: List, view, or extract individual ZIP members with metadata cross-checks, CRC and DEFLATE verification, and rejection of traversal paths, symlinks, encryption, and ZIP64. - Atomic no-clobber output: Fetched and extracted files publish through a same-parent mode-0600 temporary file with atomic rename, never overwriting existing paths. - Use Case: A build fails on the private Jenkins server. Use the helper to fetch the build's logs.zip, list its members, and show only the lines matching ERROR or Exception from the console log, all within fixed byte and deadline limits. ## Quick Start Use the bug-triage-playbook skill to fetch the console log from this Jenkins build URL and show the lines matching ERROR with two lines of context.

Frequently Asked Questions about bug-triage-playbook

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fetch a Jenkins build artifact without overwriting existing files?

Use the helper's fetch-url command with an --output path that does not yet exist under the workspace or /tmp. It streams to a same-parent mode-0600 temporary file and publishes with an atomic no-clobber link, so existing destinations are never overwritten.

How do I search Jenkins console logs for errors?

Use show-url with --grep 'ERROR|FAIL|Exception' plus --context and --line-numbers to view matching lines with surrounding context. The scan is bounded by hard byte, line, and emitted-output ceilings, and --grep, --head, and --tail are mutually exclusive.

Can I extract files from a build artifact ZIP safely?

Yes, zip-extract publishes one exact regular-file member after verifying its declared compressed span, output length, CRC, and DEFLATE end. It rejects absolute or traversing paths, symlinks, encryption, ZIP64, and excessive size or compression ratios, and never calls extractall.

Which Jenkins hosts and authentication does the helper support?

Only the fixed allowlisted HTTPS host engci-private-sjc.cisco.com on port 443 is accepted. Authentication uses named profiles that read a username and token from documented environment variables; inline URL credentials and arbitrary headers are rejected.

Why does the helper reject my URL or redirect?

URLs must be printable ASCII HTTPS on the allowlisted host with no fragments, inline credentials, or non-default ports. Redirects are revalidated per hop, must stay on the same effective HTTPS origin, and are capped in count; cross-host, downgrade, or loop redirects are rejected.

What are the limitations of the bounded artifact transport?

It is a fixed-profile transport, not a general triage or root-cause tool, and CLI flags can only tighten hard ceilings, not widen them. Output access checks cover traditional owner/mode/sticky semantics, not extended ACLs, and abrupt parent termination can leave temporary files.