bug-report

Bug Report

ℹ️ First, set expectations: before anything else, print one short line with this skill's version and its most recent change — the top entry of metadata.changelog above — e.g. bug-report vX.Y — recent: <summary>. Then proceed.

Create a well-structured GitHub issue from an incident or observed bug. Automatically sanitizes sensitive data before submission so it's safe to post to a public or shared repository.

---

Prerequisites

Requires gh CLI authenticated and configured:

gh auth status

The target repository should be set in the environment or prompted:

GITHUB_REPO=${GITHUB_REPO:-""}  # e.g. "org/repo"

---

Step 1: Gather Bug Information

Read from $ARGUMENTS or ask the user:

1. Title: Short description of the bug (1 line)
2. Source: From a recent incident report? From observation? From logs?
3. Repo: Which GitHub repo to file against

If an incident report file exists (e.g. incidents/*.md), offer to use it as input:

ls incidents/*.md 2>/dev/null | sort -r | head -5

---

Step 2: Collect Raw Content

If based on an incident report, read it:

# Read most recent incident report
LATEST=$(ls incidents/*.md 2>/dev/null | sort -r | head -1)
cat "$LATEST"

Otherwise, ask the user to paste or describe:

• Observed behavior
• Expected behavior
• Steps to reproduce
• Relevant error messages or log snippets
• Environment (OS, version, config)

---

Step 3: Sanitize Sensitive Data

Before writing the issue, replace all sensitive data with safe placeholders.

Redaction rules:

Pattern	Replace with
Private IP addresses (10.x, 172.16-31.x, 100.x, 192.168.x)	[INTERNAL-IP]
Public IP addresses	[REDACTED-IP]
Tailscale IPs (100.x.x.x)	[TAILSCALE-IP]
API keys, tokens, secrets (anything matching key=..., token=..., secret=..., password=..., Bearer ...)	[REDACTED-SECRET]
SSH private key content	[REDACTED-KEY]
Email addresses of users	[USER-EMAIL]
Full filesystem paths with usernames (e.g. /home/alice/)	replace username with [USER]
Database connection strings	[REDACTED-DB-URL]
Instance-specific hostnames or subdomains	[INSTANCE-HOSTNAME]
GCP project IDs	[GCP-PROJECT]