issue-request-manager

管理Issue Request的整个生命周期，从创建、跟踪到回复。支持多平台集成（GitHub, GitLab, Jira等），实时状态跟踪，自动化通知系统。

Security Scan

The package is mostly a local issue-tracking Python library, but its description and docs claim multi-platform integrations and REST API endpoints that are not implemented and it asks users to supply sensitive WeChat secrets in a config file — these mismatches warrant caution.

Purpose & Capability

The skill's name/description advertise multi-platform integration (GitHub, GitLab, Jira) and REST API endpoints, but the included code implements only an in-process Python issue manager, local file persistence, and an optional WeChat notifier. There is no code for GitHub/GitLab/Jira API integration, OAuth/token handling, or any HTTP server to provide the advertised REST endpoints, so the stated capabilities do not match the actual code.

Instruction Scope

SKILL.md shows simple commands (create/track/reply) but does not map how an agent should invoke the Python functions or run a server. Example files read config.json and, when enabled, call the WeChat API. The runtime instructions and examples encourage storing WeChat corp_id/secret/agent_id in config.json or passing them to init_wechat_notifier; this means the skill will read local files and make outbound HTTP calls to qyapi.weixin.qq.com when configured. The instructions are high-level and omit the missing integration/auth steps for external platforms.

Install Mechanism

This is an instruction-and-code-only skill with no install spec. Dependencies are listed in requirements.txt (requests, json5). No downloads from arbitrary URLs or executable installers are present.

Credentials

The skill declares no required environment variables or primary credential, yet it supports WeChat notifications which require corp_id/secret/agent_id. Those secrets are expected to be provided via config.json or function arguments — storing secrets in a repo/file is risky. Also the code does not request GitHub/GitLab/Jira credentials despite claiming those integrations.

Persistence & Privilege

The skill writes local persistent state (data/issues.json) and reads its config.json. It does not request elevated privileges and is not always-enabled. Persisting issue data locally is expected for this functionality, but users should note data is stored in the local filesystem.

What to consider before installing

This package implements a local Python issue-tracker and a WeChat notifier — but its README/SKILL.md overstates capabilities (mentions GitHub/GitLab/Jira integration and REST API endpoints that do not exist). Before installing: 1) don't put secrets (WeChat corp_id/secret) into the repository; prefer environment variables or a secure secrets store; 2) if you expect GitHub/GitLab/Jira integration or a REST API, require the author to supply the missing code or confirm how OAuth/tokens and a server should be configured; 3) test in a local/sandbox environment first (it will create data/issues.json and may make outbound requests to qyapi.weixin.qq.com when notifications are enabled); 4) review any changes you make to config.json and ensure network and token usage meet your security policy. The mismatches are likely sloppy/documentation drift rather than malicious, but verify before providing any credentials.

Issue Request Manager Skill

功能概述

本技能用于管理Issue Request的整个生命周期：从创建、跟踪到回复，提供完整的项目管理和问题跟踪解决方案。

核心功能

1. Issue Request创建与分类
2. Issue Request状态跟踪与监控
3. Issue Request回复与沟通
4. 通知与提醒机制

使用场景

• 项目管理
• 客户支持系统
• 开发缺陷跟踪
• 任务分配与跟进

技术特点

• 支持多平台集成（GitHub, GitLab, Jira等）
• 实时状态跟踪
• 自动化通知系统
• 可扩展的插件架构

快速开始

1. 创建新Issue Request：create issue "描述"
2. 跟踪Issue状态：track issue #123
3. 回复Issue：reply to issue #123 "回复内容"

命令参考

• create issue "<标题>" - 创建新问题
• track issue #<编号> - 跟踪指定问题
• reply to issue #<编号> "<回复内容>" - 回复问题
• assign issue #<编号> to <用户> - 分配问题给用户
• set priority #<编号> to <级别> - 设置问题优先级
• close issue #<编号> - 关闭问题