GitHub Issue Fix Pipeline

VerifiedCaution

Phased workflow to fetch, investigate, fix, and test a GitHub issue in the Rust ByroRedux project, with scoped crate-level verification.

Sby Skills Guide Bot
DevelopmentIntermediate
11/9/2026
Claude Code
#github-issues#rust#cargo#bug-fixing#workflow

Recommended for

Automated summary

This skill turns a GitHub issue number into an eight-phase pipeline: fetch the issue, classify its domain, investigate the relevant code path, implement, test, run completeness checks, then commit and close the issue.

Strengths

  • Explicit phase breakdown with concrete commands (gh issue view, cargo check/test) for each step
  • Domain classification maps the issue to a crate, which becomes the `-p` target for scoped testing instead of running the whole workspace
  • Fast inner loop with per-crate cargo check, scoped tests, and a single final full-workspace run
  • Closing checklist covering unsafe blocks, sibling bug patterns, Vulkan object lifecycle, regression tests and real-data pins

Limitations

  • Repository and crate taxonomy are hardcoded to matiaszanolli/ByroRedux, so the skill needs editing for any other project
  • Assumes a prepared environment: authenticated gh CLI, Rust toolchain, a CLAUDE.md with conventions, and an existing .github/real-data-pins.txt
  • No guidance for closed, invalid or duplicate issues, and no rollback strategy if verification fails
When to use it

Use it when a contributor wants to hand off the end-to-end fix of a known ByroRedux issue, from reading the report through to committing and closing it.

When not to use it

Avoid it for exploratory work with no linked issue, for repositories other than the hardcoded one, or when network access and gh authentication are unavailable.

Security analysis

Caution
Quality score83/100

The skill is a straightforward, transparent engineering workflow for fixing GitHub issues: fetch via gh, investigate, implement, run cargo check/test, commit, close the issue. There is no obfuscation, no curl|sh, no credential or token handling, and no attempt to disable safety controls; commands are all standard developer tooling against a single named repo. The residual risk is ordinary for a dev-automation skill — it invokes powerful CLIs (gh, git, cargo) and ends with unconfirmed commit + public issue close, which is why it is rated caution rather than safe.

Findings
  • •No allowed-tools declared even though the workflow requires shell access (gh, cargo, git), so permission scope for bash/git/network operations is implicit rather than constrained.
  • •Phase 8 performs state-changing actions without an explicit confirmation gate: `git commit` and `gh issue close ... --comment`, the latter being a public, other-visible action on a remote repository.
  • •`$ARGUMENTS` is interpolated directly into shell commands (`gh issue view $ARGUMENTS`, `gh issue close $ARGUMENTS`); while an issue number is expected, there is no validation or quoting, so unexpected input could alter command parsing.
  • •Writes artifacts into `.claude/issues/<n>/` and modifies source/tests and `.github/real-data-pins.txt` as part of the pipeline.
  • •Hardcodes a specific repository (matiaszanolli/ByroRedux) and performs real side effects: git commit and `gh issue close` on GitHub — the agent will close issues without an explicit user confirmation gate (Phase 4 only gates >5 file changes)
  • •`$ARGUMENTS` is interpolated unquoted into shell commands (`gh issue view $ARGUMENTS ...`, `gh issue close $ARGUMENTS ...`), so shell metacharacters in the argument could alter the command line (argument/command injection surface); should be quoted/validated as a numeric issue ID
  • •No allowed-tools are declared even though the workflow requires bash/gh/cargo/git execution, so the executing agent's tool permissions are unspecified
  • •Writes artifacts into `.claude/issues/$ARGUMENTS/`, which could allow path traversal outside that directory if the argument is not a plain issue number
How this analysis is made

Examples

Fix a renderer issue
/fix-issue 6224
Fix a specific bug report
Fetch GitHub issue 1187 for matiaszanolli/ByroRedux, investigate the NIF parsing path it points to, implement the fix, run the scoped tests, and commit with a conventional message that closes the issue.
Investigate then patch
Look at issue 942, figure out which crate owns the bug, add a regression test, and push a fix commit referencing the issue.

description: "Fetch a GitHub issue, investigate, plan, implement, test, and commit the fix" argument-hint: "<issue-number>"

Fix Issue Pipeline

Phase 1: Fetch

gh issue view $ARGUMENTS --repo matiaszanolli/ByroRedux --json title,body,labels,state

Save details to .claude/issues/$ARGUMENTS/ISSUE.md.

Phase 2: Classify Domain

Classify the issue — the matched crate becomes the -p test target in Phase 6:

  • renderer → byroredux-renderer — Vulkan, pipeline, GPU memory, sync, shaders, RT acceleration
  • ecs → byroredux-core — Storage, queries, world, systems, resources, components
  • nif → byroredux-nif — NIF parsing, block types, version handling, import pipeline
  • animation → byroredux-core (+ byroredux-nif for KF import) — interpolation, blending, animation system
  • bsa → byroredux-bsa — BSA/BA2 archive reading, extraction, decompression
  • esm → byroredux-plugin — ESM record parsing, cell loading, XCLL lighting
  • platform → byroredux-platform — Windowing, input, OS abstractions
  • cxx → byroredux-cxx-bridge — C++ interop
  • binary → byroredux — Game loop, scene setup, demo code

Phase 3: Investigate

Read only the source files on the code path — don't pre-read a whole crate, and don't re-read files already in context. Trace the path inline.

Specialist agents are a last resort, not a default. Each one is a fresh context window — only delegate when the issue genuinely spans 2+ domains and you can't trace it yourself. When you do, ask the agent for a conclusion (file:line + cause), not file dumps.

INVESTIGATION.md is optional. Skip it for single-site fixes — the commit body covers those. Write it only when the investigation uncovered non-obvious findings worth preserving (cross-file interactions, a wrong-looking-but-correct invariant).

Phase 4: Scope Check

If fix touches >5 files, pause and confirm with the user before proceeding.

Phase 5: Implement

Follow project conventions from CLAUDE.md.

  • Shaders: recompile SPIR-V if GLSL changed
  • No new dependencies without user approval
  • Inner loop = cargo check -p <crate> (the Phase 2 crate), not the full workspace. It's the fastest signal while iterating. Do not run cargo test on every edit — save it for Phase 6.

Phase 6: Verify

Scope first, widen only at the end. Keep output quiet so test logs don't flood context — -q prints dots for passes and full detail only for failures.

cargo test -q -p <crate>          # the Phase 2 crate — the only suite that can regress for a scoped fix
cargo test -q                     # full workspace — ONCE, final gate (skip the redundant `cargo check`: test already built everything)

All tests must pass with zero warnings. Run the full suite a single time at the end, not per fix iteration. For a fix confined to one crate with no cross-crate surface, the scoped run is sufficient evidence — note that you scoped it.

Phase 7: Completeness Checks

Before committing, verify:

  • [ ] UNSAFE: Any new unsafe blocks have safety comments
  • [ ] SIBLING: Same bug pattern checked in related files
  • [ ] DROP: Vulkan object lifecycle correct (destroy-before-parent)
  • [ ] TESTS: Regression test added if applicable
  • [ ] PINS: A HIGH/CRITICAL fix whose proof is an #[ignore]d real-data test appends <lane> <test fn> to .github/real-data-pins.txt (#6224)

Phase 8: Commit & Close

Commit with conventional message referencing the issue:

Fix #<number>: <description>

Close the issue:

gh issue close $ARGUMENTS --repo matiaszanolli/ByroRedux --comment "Fixed in <commit-hash>"

From the file to a first result

The download contains exactly the content displayed on this page. This copy may differ from the latest version in the source repository.

View the source and supporting files

This download contains SKILL.md only. Any scripts, references, templates and dependencies are not included. Get the required files from the source, preserving their directory structure, before continuing.

1. Download the file

Download SKILL.md

From the root of a test project, save the file as .skill-downloads/github-issue-fix-pipeline-mvj1ocrj/SKILL.md, or use the command below. This folder is for inspecting the skill before installation.

Command for macOS/Linux or WSL: requires a POSIX shell and curl. On Windows without WSL, use the download button and create the folder manually.

mkdir -p '.skill-downloads/github-issue-fix-pipeline-mvj1ocrj' && curl --fail --show-error --location 'https://skills-guides.com/api/skills/github-issue-fix-pipeline-mvj1ocrj/download' --output '.skill-downloads/github-issue-fix-pipeline-mvj1ocrj/SKILL.md.part' && mv '.skill-downloads/github-issue-fix-pipeline-mvj1ocrj/SKILL.md.part' '.skill-downloads/github-issue-fix-pipeline-mvj1ocrj/SKILL.md'

2. Check prerequisites

Read SKILL.md before using it. If it references scripts or external services, inspect them and prepare the required access in your test environment.

No recognized prerequisites section in this file. This does not mean it is self-contained: libraries, tools and access requirements may be mentioned elsewhere in the content or source repository.

The platforms on this page are catalog indications. The paths below follow tool documentation; they do not prove this skill has been run in those tools. No minimum tool version is confirmed for this listing.

3. Load the skill

This file does not provide a usable name/description header for this native procedure. It remains available to download and inspect; use the manual method below.

Manual method or another tool: attach SKILL.md to a conversation, or open it in an agent that can read files. Include any required supporting resources. No universal folder is recognized by every tool.

4. Try a first task

Use a short, synthetic input: an API endpoint, a small document or an interface brief. In a new conversation, attach the file or give the agent its path, then adapt this request:

Read .skill-downloads/github-issue-fix-pipeline-mvj1ocrj/SKILL.md and apply its instructions to this example: [describe a test input]. Identify any missing files, dependencies or access. Produce the result requested by the skill without inventing data or running unreviewed scripts.

Expected result: output matching the skill instructions, or a precise list of missing prerequisites. A read confirmation alone does not validate a first use. If an external resource is unavailable, that path remains untested.

Related skills