qa-bug-lifecycle

qa-bug-lifecycle is a skill for Claude Code from Kokxi/qa-test-skills. It costs 105 tokens per session (2,766 once invoked), scanned A, original, MIT.

A guide to managing a bug from discovery through confirmation, assignment, fixing, retesting, and closure. It also defines special states such as rejected, postponed, and reopened.

In plain words
What is it for?
Use it to define bug workflows, assign responsibility, track progress, and classify severity and urgency.
Why use it?
It gives everyone the same meaning for each bug status and clarifies who acts next. This helps prevent issues from being lost or closed without verification.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

Part of the qa-test-skills plugin — 49 skills shipped together

Good fit Use it to define bug workflows, assign responsibility, track progress, and classify severity and urgency.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/kokxi/qa-test-skills/qa-bug-lifecycle
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add Kokxi/qa-test-skills --skill qa-bug-lifecycle
Clone the repo
git clone --depth 1 https://github.com/Kokxi/qa-test-skills

Made for: Claude Code.

Or install qa-test-skills, the plugin that ships this one along with the rest of its 49 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for qa-bug-lifecycle

README.md
[![agentmods](https://agentmods.dev/badge/skills/kokxi/qa-test-skills/qa-bug-lifecycle.svg)](https://agentmods.dev/skills/kokxi/qa-test-skills/qa-bug-lifecycle)
Your own site
<a href="https://agentmods.dev/skills/kokxi/qa-test-skills/qa-bug-lifecycle"><img src="https://agentmods.dev/badge/skills/kokxi/qa-test-skills/qa-bug-lifecycle.svg" alt="Measured on agentmods" height="20"></a>
Per session 105 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,766 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00105 $0.02766
Opus 5 $0.00053 $0.01383
Sonnet 5 $0.00021 $0.00553
Haiku 4.5 $0.00011 $0.00277

Measured 2d ago against content hash cf1d28b386a8, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

qa-bug-lifecycle scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/qa-bug-lifecycle/SKILL.md · 295 lines

How it starts

The opening of the file, as written. The whole thing — 295 lines — stays where its author put it; the contents beside it link to each section on GitHub.

⚠️ 安全警告:本技能的示例可能涉及订单号、支付金额、截图、身份证、手机号等敏感数据。 实际使用时请勿粘贴真实生产数据、客户信息或财务凭证;测试前应脱敏/掩码处理。 本技能仅在 workspace/ 输出评估文件,不持久化、不外传、不跨会话复用。

缺陷生命周期管理

核心原则

缺陷管理不仅仅是记录Bug,而是驱动问题解决和质量改进。

缺陷生命周期

状态流转

发现 → 确认 → 分配 → 修复 → 验证 → 关闭
 │      │      │      │      │      │
 │      │      │      │      │      └─ 关闭:验证通过
 │      │      │      │      └─ 验证失败:重新打开
 │      │      │      └─ 修复完成:等待验证
 │      │      └─ 分配给开发:等待修复
 │      └─ 确认为Bug:确认问题存在
 └─ 测试发现:提交Bug报告

特殊状态:
├─ 拒绝:不是Bug/无法复现/设计如此
├─ 延期:当前版本不修复
├─ 重新打开:验证失败/回归失败
└─ 无法修复:技术限制/成本过高

状态定义

状态 定义 负责人 操作
新建 测试提交Bug 测试 提交Bug
确认 确认是Bug 测试/开发 确认/拒绝
分配 分配给开发 测试/开发 分配
修复中 开发修复中 开发 修复
待验证 修复完成等待验证 测试 验证
已关闭 验证通过 测试 关闭
重新打开 验证失败 测试 重新打开
拒绝 不是Bug 测试/开发 拒绝
延期 当前不修复 测试/开发 延期

缺陷分级

严重程度分级

P0-致命(Critical):
├─ 系统崩溃/数据丢失
├─ 核心功能完全不可用
├─ 安全漏洞
└─ 处理:立即修复

P1-严重(Major):
├─ 核心功能异常
├─ 数据错误
├─ 性能严重下降
└─ 处理:本版本修复

P2-一般(Normal):
├─ 次要功能异常
├─ 界面显示问题
├─ 操作不便
└─ 处理:下版本修复

P3-轻微(Minor):
├─ 文案错误
├─ 界面美化
├─ 优化建议
└─ 处理:排期修复

优先级定义

紧急(Urgent):
├─ 影响线上用户
├─ 阻塞测试/发布
└─ 处理:立即处理

高(High):
├─ 影响核心功能
├─ 本版本必须修复
└─ 处理:优先处理

中(Medium):
├─ 影响次要功能
├─ 尽量本版本修复
└─ 处理:正常处理

低(Low):
├─ 影响较小
├─ 可以延期处理
└─ 处理:排期处理

缺陷分析

缺陷类型分析

缺陷类型:
├─ 功能缺陷:功能不符合需求
├─ 界面缺陷:UI显示问题
├─ 性能缺陷:性能不达标
├─ 安全缺陷:安全漏洞
├─ 兼容性缺陷:兼容性问题
├─ 接口缺陷:接口问题
├─ 数据缺陷:数据问题
└─ 配置缺陷:配置问题

分析维度:
├─ 缺陷类型分布
├─ 缺陷模块分布
├─ 缺陷趋势
└─ 缺陷密度

缺陷根因分析

根因分类:
├─ 需求问题
│   ├─ 需求不清晰
│   ├─ 需求变更
│   └─ 需求遗漏
│
├─ 设计问题
│   ├─ 设计不合理
│   ├─ 设计遗漏
│   └─ 设计变更
│
├─ 实现问题
│   ├─ 代码错误
│   ├─ 逻辑错误
│   └─ 边界处理
│
├─ 环境问题
│   ├─ 环境配置
│   ├─ 依赖问题
│   └─ 数据问题
│
└─ 测试问题
    ├─ 用例遗漏
    ├─ 执行遗漏
    └─ 验证不充分

缺陷度量指标

核心指标:
├─ 缺陷密度 = 缺陷数 / 功能点数
├─ 缺陷修复率 = 已修复缺陷 / 总缺陷
├─ 缺陷重开率 = 重新打开缺陷 / 总缺陷
├─ 缺陷逃逸率 = 线上缺陷 / (线上+测试缺陷)
└─ 缺陷修复周期 = 修复日期 - 提交日期

分析维度:
├─ 按时间:缺陷趋势
├─ 按模块:模块质量
├─ 按类型:问题分布
└─ 按人员:效率分析

缺陷报告模板

Read the full file on GitHub · 295 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago Changed cf1d28b386a8
  2. 8d ago First seen · 295 lines · 105 tokens per session scan A 7d586423d478

Subscribe to this mod's changes

qa-bug-lifecycle is a skill published in the GitHub repository Kokxi/qa-test-skills (24 stars, last pushed 5d ago), licensed MIT. It adds 105 tokens to every session and 2,766 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.