Orchestrator skills, agent prompts, and state management for the Jira autofix pipeline
Use when orchestrating CVE remediation for a Jira Vulnerability ticket. Uses a Python state machine (cve_pipeline.py) for deterministic routing between scan, fix, verify, VEX, review, and PR creation agents. Never writes fix code directly.
Use when orchestrating a Jira ticket fix end-to-end. Dispatches to implement and review prompt agents in a loop, uses state.py for persistence, and evaluates findings to decide iteration. Never writes code directly.
Use when assessing a Jira bug ticket for AI autofix readiness. Produces a structured JSON verdict (ready/needs_info/not_fixable) based on a three-gate rubric. Designed for CI pipeline use with the autofix pipeline orchestrator.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Claude Code plugin for the Jira autofix pipeline. Provides orchestrator skills, agent prompt files, and deterministic Python scripts for automated bug fixing, CVE remediation, and ticket triage.
This plugin is the inner layer of the autofix pipeline, the skills that run inside the Claude Code container. The outer layer (Python orchestration, GitLab CI, ticket management) lives in jira-autofix and agentic-ci (generic CI framework).
| Skill | Description |
|---|---|
autofix-resolve | Orchestrates end-to-end bug fixing: implement, review, evaluate loop (max 3 iterations) |
autofix-cve-resolve | CVE remediation across multiple repos with state-machine dispatch |
autofix-triage | Assesses bug tickets for AI autofix readiness (ready/needs_info/not_fixable) |
| Script | Description |
|---|---|
merge_findings.py | Merges core review findings with extension findings, tags each with source |
state.py | State persistence utility for context-compression recovery |
cve_pipeline.py | CVE state machine: deterministic routing, wave dispatch, progress polling |
This plugin is pre-installed in the ghcr.io/opendatahub-io/ai-helpers container image. For local development:
git clone [email protected]:opendatahub-io/autofix-skills.git
# Install as a Claude Code plugin (local directory source)
claude plugin install /path/to/autofix-skills
make lint
See CONTRIBUTING.md for the full development workflow.
The eval/ directory contains test cases for evaluating skill quality using the agent-eval-harness. Two eval configs are provided:
| Config | Skill | Cases |
|---|---|---|
eval.yaml | autofix-resolve | eval/cases/ (10 cases: bug fixes, iteration, triage decisions, security guardrails) |
eval-triage.yaml | autofix-triage | eval/cases-triage/ (4 cases: ready, needs_info, not_fixable, borderline) |
# Install the eval harness
pip install -e ../agent-eval-harness
# Run the autofix-resolve eval suite
/eval-run --config eval.yaml --model opus
# Run the triage eval suite
/eval-run --config eval-triage.yaml --model opus
# Run a single case
/eval-run --config eval.yaml --model opus --cases case-006-agents-md-compliance
Results are written to eval/runs/<run-id>/ with per-case verdicts, modified files, events, and an HTML report. See eval.md and eval-triage.md for detailed analysis docs.
Each case directory contains an input.yaml, .autofix-context/ with ticket data, optional source files in src/, and annotations.yaml with expected outcomes. AGENTS.md files are stored with a .fixture suffix to prevent agents working in this repo from auto-discovering test payloads (case-010 contains a credential-harvesting guardrail test). The eval SessionStart hook activates fixtures before each case runs.
See AGENTS.md for architecture details and conventions.
Team-specific extension skills go in ai-helpers, not this repo. Extensions are normal Claude skills that read from .autofix-context/ and write findings to .autofix-context/extension-findings/<skill-name>.json.
Use git tags (v0.1.0, v0.2.0, etc.) for releases. The outer-layer runner pins a release via SkillConfig.skill_ref. The main branch is the development head.
npx claudepluginhub opendatahub-io/ai-helpers --plugin autofix-skillsAgent and skill evaluation harness with MLflow integration
Site generation skills for the OpenDataHub Skills Registry
Assess RFEs against quality criteria using a structured rubric
Documentation review, writing, and workflow tools for AsciiDoc and Markdown documentation
A plugin providing a subagent to scan a source code project for potential FIPS compliance issues
Ultra-compressed communication mode. Cuts ~75% of tokens while keeping full technical accuracy by speaking like a caveman.
Memory compression system for Claude Code - persist context across sessions
Multi-model consensus engine integrating OpenAI Codex CLI, Gemini CLI, and Claude CLI for collaborative code review and problem-solving.
Curate auto-memory, promote learnings to CLAUDE.md and rules, extract proven patterns into reusable skills.