Skip to content
Back to skills

Booley Qa Triage

ASecurity

Only when the user explicitly asks, triage finished Booley QA runs with the maintainer one finding at a time — verify each against current main, decide together, and file or fix as each decision lands.

  • 10 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 19, 2026
ai-agentsgitdocumentation

Works with

  • cli

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned October 2, 2026

npx -y skills add boldaxolotl/booley --skill booley-qa-triage --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Booley Qa Triage?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Booley Qa Triage
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/boldaxolotl-booley-qa-triage/badge)](https://www.skillsdirectory.com/skills/boldaxolotl-booley-qa-triage)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: booley-qa-triage
description: Only when the user explicitly asks, triage finished Booley QA runs with the maintainer one finding at a time — verify each against current main, decide together, and file or fix as each decision lands.
---

# Triage Booley QA findings

Use this skill only when the user explicitly invokes it. This is behavioral
guidance for clients without enforceable invocation metadata. Resolve the real
path of this loaded `SKILL.md`; derive `qa/` and the source root from its parent
directories. Before acting, require that source to be a clean primary checkout
on `main`, with `.git` as a directory. Stop with restore/re-enable guidance if
validation fails. The installed `booley` revision does not matter here: triage
verifies every finding against `origin/main`, and each run's `log.md` records
the build it tested. Resolve repository inputs such as
`docs/internals/agents/triage-labels.md`, `qa/missions/`, and `qa/shared/` from
that derived root, never from the process working directory.

Input: one or more QA run directories (each has `findings.md` and `log.md`).
The maintainer decides; you verify each finding and prepare the decision.
Triage is a conversation, one **brief** per turn.

1. **Read.** Read every run's `log.md` and `findings.md` in full. Note each
   run's identity header (build under test, mission revision) so findings from
   different builds stay distinguishable. Done when every finding has a reference
   such as `<run-id>#F-3`.
2. **Cluster.** Group findings that describe the same underlying problem, across
   runs as well as within one. Keep a causal chain as linked clusters (`caused-by`)
   rather than one merged cluster. Done when every finding sits in exactly one
   cluster.
3. **Check the tracker.** List open and recently closed issues once
   (`gh issue list --state all --limit 300`) and match every cluster against it.
   Mark clusters `known #<n>`, `fixed #<n>` (and whether the run's build predates
   the fix), or `new`.
4. **Open the decision log.** Create `<run-dir>/triage.md`: one line per cluster
   with its finding refs, the decision, and the issue number or mission change.
   It is the resume point after an interruption or handoff. Show the maintainer a
   short overview (counts by kind and severity, the cluster order) and start.
5. **Brief one cluster, then wait.** Order: `qa-bug` clusters first, then product
   clusters by severity. Each brief states:
   - what happened, with the decisive command and output excerpt from the evidence;
   - the cause, **verified against current `origin/main`** (`git fetch`, then
     `git show`/`git grep` on `origin/main`) with `file:line`: the build under test
     may be stale, and a finding already fixed or documented on main says so;
   - why it is a product defect, doc defect, or `qa-bug`, or why it is weaker than
     reported. Downgrade, reclassify, or narrow a finding when the code or the design
     supports it, and say what the design intends;
   - **blast radius**: can the same defect live elsewhere in Booley, such as the
     same path handling in the other Flows, or the same pattern in sibling
     commands? Answer yes, no, or likely from the cause and a quick look at its
     callers and siblings. Stop there: the audit belongs to the agent that works
     the issue;
   - fix directions as lettered options with your recommendation.

   Wait for the maintainer's decision. Answer their questions with more code
   reading before re-proposing. Done when the maintainer has decided this cluster.
6. **Act on the decision immediately**, then log it in `triage.md` and brief the
   next cluster.
   - `file` (a product or doc cluster, or a `qa-bug` the maintainer asks to file):
     draft the issue in a local file with problem, repro, build identity, the verified
     cause, the **approved fix direction only** under a `## Fix` heading, and
     acceptance criteria. When the
     blast radius is yes or likely, the fix section starts with **Step 1: audit**,
     naming the suspected places and the pattern to search for; the fix then
     covers every affected place the audit finds. When the decision widens scope in
     other ways (for example "add a Doctor check"), write that into the issue too.
     Follow the issue rules in `AGENTS.md`: scan title and body with the
     confidential-content guard, then `gh issue create`. Label with `bug`,
     `documentation`, or `enhancement`, and with the triage role from
     `docs/internals/agents/triage-labels.md` (`ready-for-agent` when the fix is
     decided, `needs-triage` for open design).
   - `comment on #<n>`: same drafting and scan, then `gh issue comment`.
   - `fix mission`: record the exact change in `triage.md`; mission edits are
     batched in step 7.
   - `drop`: record the reason.
   When the maintainer asks for progress, give findings done and left, and offer
   the remaining low-severity clusters in batches of four to six, one line each.
7. **Apply mission fixes** after the last decision, in one worktree and branch per
   `AGENTS.md`: every recorded `fix mission` change under `qa/missions/` and
   `qa/shared/`, with traps in the mission's **Known traps** section.
8. **Summarize.** Report what was filed, commented, fixed, and dropped, with issue
   links, and the path of `triage.md`.

Files in this skill

  • SKILL.md7.6 KB
  • agents/openai.yaml261 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.