skills.rest
amotion-ai
amotion-aiOFFICIAL
Explore all skills by this author →
GitHub

triage

Scan BotAssist codebase for security vulnerabilities, logic errors, and test coverage gaps.

Updated Apr 7, 2026
Search Tags:#react#python#code-scanning#test-coverage#bug-detection#security-analysis
One-click install
npx skills add https://github.com/amotion-ai/botassist --skill triage-amotion-ai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: triage
Source: https://github.com/amotion-ai/botassist/tree/main/.claude/skills/triage
Command: npx skills add https://github.com/amotion-ai/botassist --skill triage-amotion-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The triage skill helps developers quickly find security vulnerabilities, logic errors, and missing test coverage in the BotAssist codebase, turning hidden bugs into actionable items.

Core Features & Use Cases

  • Security Scan: Detects SQL injection, hard‑coded secrets, timing attacks, missing authentication, and CORS misconfigurations.
  • Logic Bug Detection: Finds off‑by‑one errors, incorrect sorting, silent exception handling, and validation gaps in both Python and React code.
  • Test Coverage Analysis: Highlights modules without tests and suggests where new tests are needed.
  • Prioritized Report: Generates a clear, severity‑ranked list of issues with suggested next actions, ideal for sprint planning or rapid bug triage.

Quick Start

Run /triage without arguments to scan the entire BotAssist repository and receive a prioritized bug report.

Frequently Asked Questions about triage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my Python and React codebase for security vulnerabilities and logic bugs?▼

To scan your codebase for security vulnerabilities and logic bugs, run the tool without arguments to analyze Python backend and React frontend files. It searches for SQL injection, hardcoded secrets, timing attacks, and missing authentication to produce a prioritized report.

What is the best way to detect SQL injection and hardcoded secrets in a full stack web application?▼

The best way to detect SQL injection and hardcoded secrets is using an automated scanner that parses your source files. This tool identifies these specific security flaws along with CORS misconfigurations across your Python and React code.

Can I identify missing test coverage and untested modules in a React and Python project?▼

Yes, you can identify missing test coverage by scanning your project files. The tool highlights modules without tests and suggests where new tests are needed to close coverage gaps in your Python and React codebase.

Does the code scanning process modify my repository files during bug detection?▼

No, the code scanning process does not modify your repository files during bug detection. It operates strictly in a read-only mode using Bash, grep, and file-system globbing tools to ensure your source code remains completely untouched.

How do I generate a prioritized bug report for sprint planning?▼

You generate a prioritized bug report for sprint planning by running a comprehensive code scan. The tool outputs a severity-ranked list of identified security vulnerabilities, logic errors, and coverage gaps with suggested next actions.

Related Skills

Explore More Software Engineering Skills→
yves-syves-s
24

plugin-security-gate

Scan plugin skill files for injection, execution, persistence, and filesystem violations.

Community
Advanced
Exia-thdExia-thd

code-reviewer

Analyze source code and produce severity-ranked review reports with metrics and auto-fix suggestions.

Community
Advanced
NabilThangeNabilThange
1

lint-and-validate

Automate linting and static analysis for Node.js, Python, and TypeScript code.

Community
Intermediate
lamb92009lamb92009

security-reviewer

Identify vulnerabilities in code, configurations, and infrastructure with prioritized remediation guidance.

Community
Advanced