skills.rest
rp4ri
rp4riCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

bug-triage

Classify source files by risk level and recommend scan targets for bug-hunt pipelines.

Updated Jun 2, 2026
Search Tags:#file analysis#bug triage#risk classification#scan target recommendation#bug hunt
One-click install
npx skills add https://github.com/rp4ri/pi-studios --skill bug-triage-rp4ri
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: bug-triage
Source: https://github.com/rp4ri/pi-studios/tree/main/dev-studio/skills/bug-triage
Command: npx skills add https://github.com/rp4ri/pi-studios --skill bug-triage-rp4ri

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill streamlines the process of quickly classifying files by risk level and recommending optimal scan targets, enhancing the efficiency of the bug-hunt pipeline.

Core Features & Use Cases

  • File Classification: Automatically classify source files by risk level (critical, high, medium, low, skip).
  • Triage Results Analysis: Summarize triage results, providing a breakdown by risk tier and highlighting top-risk files.
  • Scan Target Recommendations: Suggest which directories/files to scan first and estimate scan scope.
  • Use Case: After running the triage script, the Skill generates a concise report that helps prioritize the bug-hunt efforts.

Quick Start

Run the triage script and review the generated report to identify high-risk files for scanning.

Frequently Asked Questions about bug-triage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is bug triage and how does file risk classification work?▼

Bug triage classifies source files by risk level (critical, high, medium, low, skip) to prioritize security analysis. The mechanism uses scripting to analyze source files and generate a report highlighting top-risk files for the bug-hunt pipeline.

How do I identify scan targets for a source code bug hunt?▼

To identify scan targets for a bug hunt, run the triage script against your project's source files. The script analyzes the codebase and generates a concise report recommending which directories and files to scan first, along with an estimated scan scope.

Do I need Node.js to run file risk classification scripts?▼

Yes, you need a Node.js environment to run the file risk classification scripts. You also need direct access to the project's source files so the analysis script can read the codebase and generate the triage breakdown report.

What's the best way to prioritize files for a bug hunt pipeline?▼

The best way to prioritize bug hunt efforts is to run a triage script that categorizes files by risk tier. This approach provides a breakdown of critical and high-risk files, allowing you to focus scanning resources on the most vulnerable areas first.

Can I summarize bug triage results by risk tier for large projects?▼

Yes, the triage script summarizes bug triage results by providing a complete breakdown across all risk tiers. It processes your project's source files to highlight top-risk files and estimate the scan scope, streamlining large project analysis.

Related Skills

Explore More Software Engineering Skills→
wrightchinwrightchin

manage-mounts

Manage NanoClaw agent container access to host directories via a JSON allowlist.

Community
Intermediate
Ramprasad4121Ramprasad4121
1

security-auditor

Audit Solidity smart contracts using Slither, Aderyn, and the Map-Hunt-Attack methodology.

Community
Advanced
philo-grovesphilo-groves
12

maxtac-sast-opengrep

Author and execute OpenGrep rules for static application security testing.

Community
Advanced
infantesromeroadrianinfantesromeroadrian

bug-bounty

Automate subdomain enumeration, asset discovery, and vulnerability hunting workflows.

Community
Advanced