Skills/ClawHub/qa-bug-lifecycle

qa-bug-lifecycle@1.8.0

VERIFIED

Publisher claims: "当团队缺陷管理混乱、Bug 没有统一的分级标准、或者领导要看缺陷趋势数据时使用此技能。覆盖缺陷从提交到关闭的完整生命周期，包括严重度/优先级分级规范、各状态流转条件和时效要求、缺陷度量和趋势分析。如果缺陷管理不规范，复盘数据就是垃圾——"严重Bug数量下降"可能是因为大家不再标记严重了。 触发场景：缺陷管理、Bug管理、缺陷流程、Bug状态、严重度、缺陷趋势、团队需要规范缺陷管理流程时。 Use when the user asks about: bug and defect management — severity and priority grading, status workflow and SLA, defect metrics, and trend analysis." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher kokxi · joined 5 days agoInstalls 1,208Last detonated 5d ago
$clawhub install qa-bug-lifecycle
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-29 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
npx invocation of non-well-known packageSKILL.md:19 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06

No other findings across 331 lines in 3 files.