@intentsolutionsio/severity1-marketplace 1.0.0 → 1.0.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1,6 +1,35 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: severity-triage
|
|
3
3
|
description: Automated severity triage agent for issues and vulnerabilities
|
|
4
|
+
tools:
|
|
5
|
+
- Read
|
|
6
|
+
- Write
|
|
7
|
+
- Edit
|
|
8
|
+
- Bash
|
|
9
|
+
- Glob
|
|
10
|
+
- Grep
|
|
11
|
+
- WebFetch
|
|
12
|
+
- WebSearch
|
|
13
|
+
- Task
|
|
14
|
+
- TodoWrite
|
|
15
|
+
model: sonnet
|
|
16
|
+
color: blue
|
|
17
|
+
version: 1.0.0
|
|
18
|
+
author: Jeremy Longshore <jeremy@intentsolutions.io>
|
|
19
|
+
tags:
|
|
20
|
+
- security
|
|
21
|
+
- severity
|
|
22
|
+
- triage
|
|
23
|
+
disallowedTools: []
|
|
24
|
+
skills: []
|
|
25
|
+
background: false
|
|
26
|
+
# ── upgrade levers — uncomment + set when tuning this agent ──
|
|
27
|
+
# effort: high # reasoning depth: low/medium/high/xhigh/max (omit = inherit session)
|
|
28
|
+
# maxTurns: 50 # cap the agentic loop (omit = engine default)
|
|
29
|
+
# memory: project # persistent scope: user/project/local (omit = ephemeral)
|
|
30
|
+
# isolation: worktree # run in an isolated git worktree
|
|
31
|
+
# initialPrompt: "…" # seed the agent's first turn
|
|
32
|
+
# hooks / mcpServers / permissionMode → set at the PLUGIN level, not on a plugin agent
|
|
4
33
|
---
|
|
5
34
|
# Severity Triage Agent
|
|
6
35
|
|
|
@@ -10,6 +10,7 @@ Analyze the provided issue, bug report, or security finding and assign an approp
|
|
|
10
10
|
## Severity Levels
|
|
11
11
|
|
|
12
12
|
### S1 — Critical
|
|
13
|
+
|
|
13
14
|
- System completely down or unusable
|
|
14
15
|
- Active data loss or corruption
|
|
15
16
|
- Security breach with confirmed exploitation
|
|
@@ -17,6 +18,7 @@ Analyze the provided issue, bug report, or security finding and assign an approp
|
|
|
17
18
|
- **Response time:** Immediate
|
|
18
19
|
|
|
19
20
|
### S2 — High
|
|
21
|
+
|
|
20
22
|
- Major functionality broken for many users
|
|
21
23
|
- Security vulnerability with high exploitability
|
|
22
24
|
- Data integrity at risk
|
|
@@ -24,6 +26,7 @@ Analyze the provided issue, bug report, or security finding and assign an approp
|
|
|
24
26
|
- **Response time:** Within 4 hours
|
|
25
27
|
|
|
26
28
|
### S3 — Medium
|
|
29
|
+
|
|
27
30
|
- Functionality degraded but operational
|
|
28
31
|
- Security issue with limited scope
|
|
29
32
|
- Reasonable workaround available
|
|
@@ -31,6 +34,7 @@ Analyze the provided issue, bug report, or security finding and assign an approp
|
|
|
31
34
|
- **Response time:** Within 24 hours
|
|
32
35
|
|
|
33
36
|
### S4 — Low
|
|
37
|
+
|
|
34
38
|
- Minor issue or cosmetic defect
|
|
35
39
|
- Enhancement request
|
|
36
40
|
- Documentation improvement
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@intentsolutionsio/severity1-marketplace",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.4",
|
|
4
4
|
"description": "Severity level classification and prompt improvement for marketplace plugins. Assigns severity ratings (S1-Critical through S4-Low) and enhances plugin prompts for clarity, safety, and effectiveness.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"severity",
|
|
@@ -1,13 +1,19 @@
|
|
|
1
1
|
---
|
|
2
2
|
name: prompt-improver
|
|
3
|
-
description:
|
|
4
|
-
|
|
3
|
+
description: 'Analyze and improve plugin prompts, skill definitions, and command instructions
|
|
4
|
+
for clarity, safety, and effectiveness. Use when the user asks to "improve a prompt",
|
|
5
|
+
"review a skill", "enhance instructions", "make this prompt better", "optimize this
|
|
6
|
+
command", or "audit prompt quality".
|
|
7
|
+
|
|
8
|
+
'
|
|
5
9
|
allowed-tools: Read, Write, Edit, Glob, Grep
|
|
6
10
|
version: 1.0.0
|
|
7
11
|
author: severity1 <severity1@intentsolutions.io>
|
|
8
12
|
license: MIT
|
|
9
|
-
tags:
|
|
10
|
-
|
|
13
|
+
tags:
|
|
14
|
+
- security
|
|
15
|
+
- compliance
|
|
16
|
+
compatibility: Designed for Claude Code
|
|
11
17
|
---
|
|
12
18
|
# Prompt Improver
|
|
13
19
|
|
|
@@ -20,6 +26,7 @@ The prompt-improver skill evaluates plugin content across five dimensions — cl
|
|
|
20
26
|
## When to Use This Skill
|
|
21
27
|
|
|
22
28
|
This skill activates when you need to:
|
|
29
|
+
|
|
23
30
|
- Review and improve a SKILL.md file's instructions
|
|
24
31
|
- Enhance command or agent markdown definitions
|
|
25
32
|
- Audit prompt quality across a plugin
|
|
@@ -76,11 +83,13 @@ This skill activates when you need to:
|
|
|
76
83
|
### Example 1: Improving a vague skill description
|
|
77
84
|
|
|
78
85
|
**Before:**
|
|
86
|
+
|
|
79
87
|
```yaml
|
|
80
88
|
description: Does stuff with code
|
|
81
89
|
```
|
|
82
90
|
|
|
83
91
|
**After:**
|
|
92
|
+
|
|
84
93
|
```yaml
|
|
85
94
|
description: |
|
|
86
95
|
Analyze source code for common anti-patterns and suggest refactoring improvements. Use when the user asks to "review code quality", "find code smells", or "refactor this file".
|
|
@@ -89,11 +98,13 @@ description: |
|
|
|
89
98
|
### Example 2: Adding missing safety guidance
|
|
90
99
|
|
|
91
100
|
**Before:**
|
|
101
|
+
|
|
92
102
|
```markdown
|
|
93
103
|
Delete all temporary files from the project.
|
|
94
104
|
```
|
|
95
105
|
|
|
96
106
|
**After:**
|
|
107
|
+
|
|
97
108
|
```markdown
|
|
98
109
|
Identify temporary files (*.tmp, *.bak, *.swp) in the project. List them for user confirmation before deletion. Never delete files outside the project root.
|
|
99
110
|
```
|
|
@@ -107,6 +118,7 @@ Identify temporary files (*.tmp, *.bak, *.swp) in the project. List them for use
|
|
|
107
118
|
## Output
|
|
108
119
|
|
|
109
120
|
The skill produces a structured analysis report containing:
|
|
121
|
+
|
|
110
122
|
- **Score card**: 5 dimensions rated 1-5 with notes and an overall score out of 25
|
|
111
123
|
- **Improvement list**: Specific weaknesses with file paths and line references
|
|
112
124
|
- **Suggested rewrite**: Full improved prompt text preserving original intent
|
|
@@ -5,6 +5,7 @@
|
|
|
5
5
|
**Definition:** System-down, active data loss, or confirmed security breach requiring immediate response.
|
|
6
6
|
|
|
7
7
|
**Indicators:**
|
|
8
|
+
|
|
8
9
|
- Production system completely unavailable
|
|
9
10
|
- Active data corruption or loss
|
|
10
11
|
- Confirmed security exploitation in progress
|
|
@@ -14,6 +15,7 @@
|
|
|
14
15
|
**Response:** Immediate — all hands on deck
|
|
15
16
|
|
|
16
17
|
**Examples:**
|
|
18
|
+
|
|
17
19
|
- SQL injection actively being exploited
|
|
18
20
|
- Database corruption causing data loss
|
|
19
21
|
- Authentication bypass allowing unauthorized access
|
|
@@ -24,6 +26,7 @@
|
|
|
24
26
|
**Definition:** Major functionality broken or security vulnerability with high exploitability requiring urgent resolution.
|
|
25
27
|
|
|
26
28
|
**Indicators:**
|
|
29
|
+
|
|
27
30
|
- Core feature non-functional
|
|
28
31
|
- Security vulnerability with known exploit path
|
|
29
32
|
- Data integrity at risk but not actively compromised
|
|
@@ -32,6 +35,7 @@
|
|
|
32
35
|
**Response:** Within 4 hours
|
|
33
36
|
|
|
34
37
|
**Examples:**
|
|
38
|
+
|
|
35
39
|
- Payment processing failing for subset of users
|
|
36
40
|
- XSS vulnerability in user input fields
|
|
37
41
|
- API rate limiting completely broken
|
|
@@ -42,6 +46,7 @@
|
|
|
42
46
|
**Definition:** Degraded functionality with reasonable workaround available, scheduled for normal fix cycle.
|
|
43
47
|
|
|
44
48
|
**Indicators:**
|
|
49
|
+
|
|
45
50
|
- Feature works but with reduced capability
|
|
46
51
|
- Security issue with limited scope or low exploitability
|
|
47
52
|
- Workaround is available and practical
|
|
@@ -50,6 +55,7 @@
|
|
|
50
55
|
**Response:** Within 24 hours
|
|
51
56
|
|
|
52
57
|
**Examples:**
|
|
58
|
+
|
|
53
59
|
- Search results occasionally missing items
|
|
54
60
|
- CSRF token not rotating on session refresh
|
|
55
61
|
- Export feature produces incorrect formatting
|
|
@@ -60,6 +66,7 @@
|
|
|
60
66
|
**Definition:** Minor issue, cosmetic defect, or enhancement request for the backlog.
|
|
61
67
|
|
|
62
68
|
**Indicators:**
|
|
69
|
+
|
|
63
70
|
- Cosmetic or UI inconsistency
|
|
64
71
|
- Documentation error
|
|
65
72
|
- Enhancement request
|
|
@@ -68,6 +75,7 @@
|
|
|
68
75
|
**Response:** Backlog prioritization
|
|
69
76
|
|
|
70
77
|
**Examples:**
|
|
78
|
+
|
|
71
79
|
- Typo in error message
|
|
72
80
|
- Button color inconsistent with design system
|
|
73
81
|
- Feature request for additional export format
|