create-defect

A workflow for creating and delivering a one-off software defect, meaning a bug report or small unplanned fix. It puts the defect on a project map and board, assigns it to the current user, and runs the build process once.

In plain words
What is it for?
Use it for an incoming bug or ad-hoc fix that should be tracked, assigned, implemented, and delivered end to end.
Why use it?
It provides a defined path for handling an isolated bug without adding it to a longer, ordered development plan.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/devstride/claude-plugin/create-defect
Any agent
npx skills add devstride/claude-plugin --skill create-defect
Clone the repo
git clone --depth 1 https://github.com/devstride/claude-plugin

Made for: Claude Code, Codex.

Per session 63 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,782 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00063 $0.01782
Opus 5 $0.00032 $0.00891
Sonnet 5 $0.00013 $0.00356
Haiku 4.5 $0.00006 $0.00178

Measured yesterday against content hash ed2ecbcaade6, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

create-defect scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

1 near-identical copy found in the catalogue:

skills/create-defect/SKILL.md · 53 lines

How it starts

The opening of the file, as written. The whole thing — 53 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Human output. Read ${CLAUDE_PLUGIN_ROOT}/skills/build-item/references/plain-language-output.md once per top-level run; composed skills reuse it. Apply it to every message.

Create a NEW one-off Defect (the one-day leaf role — this org's Defect type) — an inbound bug report or ad-hoc fix that is NOT part of a sequenced /devstride:plan roadmap — file it where you want in the DevStride map, put it on a board, assign it to the current user, then deliver it end-to-end with the SAME build loop /devstride:build-item runs, exactly ONCE (no plan walk, no next-story selection, no dependency chain). Use /devstride:insert-defect instead when the fix belongs in an existing sequenced plan's dependency chain — that one splices + numbers + lets the loop pick it up in order; this one is a standalone create + single build.

Argument — free text describing the defect, optionally prefixed/suffixed with a parent item or workstream number (e.g. I20100 webhook retries duplicate on 429, F42 ..., or just webhook retries duplicate on 429): $ARGUMENTS

IMPORTANT — the DevStride MCP targets PRODUCTION (api.devstride.com). Every create/update here is a real, user-visible change to the live workspace — there is no draft/sandbox mode.

This skill has two phases: (A) CREATE + PLACE the item interactively (steps 0–1), then (B) DELIVER it by invoking build-item in its one-off mode (step 2). Phase B is the EXACT same branch → build → review → PR → merge → completion ritual the plan loop uses — the only difference is it runs once and is not part of a sequenced plan.

0. Gather placement + assignment — ask at the OUTSET, do not guess

  • First, require enough to act on. If $ARGUMENTS is empty, or too thin to write an honest repro from (a bare invocation, or a vague fragment like "it's broken"), STOP and ask the user what the bug actually is — repro steps and expected-vs-actual behavior — before creating or resolving anything. Do NOT invent a defect or proceed on a guess.

Once you have a real repro/root-cause, pin these down (inbound work has no natural home in the graph, so ask — don't guess):

  • Where in the map? Ask which parent item to file under — an item at any grouping level of your org's hierarchy (this org: Module / Capability / Epic; I#####) or a workstream/folder (F####). A defect often belongs under whichever parent item owns the broken behavior. If $ARGUMENTS already carries a parent, confirm it rather than re-asking; otherwise ask. Resolve with resolve_item / find_parent_candidates (the org's defect-flavored leaf type via get_work_type_hierarchy; this org: Defect) and NEVER guess a parent — the backend rejects illegal parent/type pairings anyway.
  • Which board? Ask which DevStride board it should live on (a triage/kanban board, or a current cycle/sprint). List the candidates with list_boards; resolve the chosen board's id and its default not-started lane with get_board. A one-off defect should be VISIBLE on a board — unlike sequenced-plan items, which live on the Gantt.
  • Assignee = the current user by default. Resolve the caller via whoami (identity → username) and assign the item to that user (assigneeUsername). State who that resolved to and allow the user to name a different assignee before creating.
  • Resolve the org's priority order (get_workspace_context, same non-canonical-config caveat as plan step 0) so you can set a sensible priorityId — a defect blocking real usage usually warrants an above-normal priority; ask if unclear.

Read the full file on GitHub · 53 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 53 lines · 63 tokens per session scan A ed2ecbcaade6

Subscribe to this mod's changes

create-defect is a skill published in the GitHub repository devstride/claude-plugin (2 stars, last pushed 3d ago), licensed MIT. It adds 63 tokens to every session and 1,782 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

systematic-debugging

Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.

obra/superpowers · 21 tokens

next-cache-components-adoption

Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…

vercel/next.js · 95 tokens

babysit-pr

Babysit a GitHub pull request after creation by continuously polling review comments, CI checks/workflow runs, and mergeability state until the PR is merged/closed or user help is required. Diagnose failures, retry likely flaky failures up to 3 times, auto-fix/push branch-related issues when appropriate, and keep…

openai/codex · 114 tokens

imagegen

Generate or edit raster images when the task benefits from AI-created bitmap visuals such as photos, illustrations, textures, sprites, mockups, or transparent-background cutouts. Use when Codex should create a brand-new image, transform an existing image, or derive visual variants from references, and the output…

openai/codex · 113 tokens

cpu-profile-analysis

Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…

microsoft/vscode · 71 tokens

next-cache-components-optimizer

Drive a Next.js route to instant navigation by setting up an agentic loop, under Cache Components / PPR, on initial load (hard navigation) and client-side navigation (soft navigation). Encode the goal as a failing @next/playwright instant() e2e and work it to green, one verified route at a time; the shipped test then…

vercel/next.js · 170 tokens