Severity Triage
Classifies incoming issues, bug reports, and vulnerability findings using the S1-S4 severity framework with blast-radius analysis and escalation routing. Use when triaging bugs or security findings that need consistent prioritization. Trigger with "triage this issue", "classify severity".
- Type
- Subagent
- Repository
- jeremylongshore/tons-of-skills-marketplace
- GitHub stars
- 2.8k
- License
- MIT
- Repo last updated
- Sep 27, 2026
- Model
- sonnet
- Version
- 1.0.0
- Author
- Jeremy Longshore <[email protected]>
What Severity Triage is
Severity Triage is a subagent published in the jeremylongshore/tons-of-skills-marketplace repository on GitHub, which has about 2.8k stars. The repository describes itself as: “Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com.”
A subagent is a specialist assistant that Claude can hand part of a task to. It is a markdown file whose frontmatter sets a name, a description that tells Claude when to delegate, and optionally the tools and model it may use; the body becomes the subagent's own system prompt.
Because a subagent works in its own context, it keeps the main conversation focused: Claude can send a narrow job, such as a review or a specialised analysis, to Severity Triage and get back a compact result.
How to install Severity Triage
Claude Code
- Download severity-triage.md from the repository.
- Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control.
- Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Claude Cowork
- Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent.
- Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.
Inside the source file
An excerpt from plugins/security/severity1-marketplace/agents/severity-triage.md, shared under the repository's MIT license. Read the full file on GitHub.
You are a severity triage agent that automatically classifies incoming issues, bug reports, and vulnerability findings using the S1-S4 severity framework.
Capabilities
- Analyze issue descriptions and context to determine severity
- Cross-reference against known vulnerability databases and patterns
- Provide consistent, justified severity classifications
- Recommend escalation paths based on severity level
Triage Workflow
- Intake — Read the issue or finding in full
- Context Gathering — Search the codebase for related files and recent changes
- Impact Assessment — Determine blast radius and affected components
- Severity Assignment — Classify using S1-S4 framework
- Action Routing — Recommend next steps based on severity
Severity Decision Matrix
Output
Provide a structured triage report with severity level, rationale, recommended actions, and escalation guidance.
Before you install
- Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
- Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
- Try it in a test project or a copy of your files before pointing it at real work.
- Pin the version you tested, and review changes before updating.
- Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.
FAQ
What is Severity Triage?
Severity Triage is a subagent for Claude Code and Claude Cowork from the jeremylongshore/tons-of-skills-marketplace repository on GitHub. Classifies incoming issues, bug reports, and vulnerability findings using the S1-S4 severity framework with blast-radius analysis and escalation routing. Use when triaging bugs or security findings that need consistent prioritization. Trigger with "triage this issue", "classify severity".
How do I install Severity Triage in Claude Code?
Download severity-triage.md from the repository. Save it to ~/.claude/agents/ to use it in every project, or to .claude/agents/ inside one project to share it through version control. Claude Code watches these folders, so the subagent is usually available right away. Ask Claude to use it by name, or @-mention it to make sure it runs.
Can I use Severity Triage in Claude Cowork?
Cowork loads subagents through plugins. If the repository is packaged as a plugin marketplace, add it under Customize → Plugins → Add marketplace and install the plugin that contains this subagent. Otherwise, bundle the file into your own plugin's agents/ folder and upload it from Customize → Plugins.
Is Severity Triage safe to install?
It is a third-party community resource, not reviewed by Anthropic or this site. Read the source file first, check which tools and connectors it uses, and install only from sources you trust.
Similar resources
- K8s Troubleshoot Debug Kubernetes pod failures and issues Slash Command · jeremylongshore/tons-of-skills-marketplace
- Juicebox Pack Claude Code skill pack for Juicebox (24 skills) Plugin · jeremylongshore/tons-of-skills-marketplace
- Klaviyo Pack Claude Code skill pack for Klaviyo (24 skills) Plugin · jeremylongshore/tons-of-skills-marketplace
- Keep Builds customer success systems — onboarding flows, health scoring models, expansion playbooks, and churn prevention sequences that drive NRR. Use when designing onboarding, modeling customer health, or building a retention playbook. Trigger with \"build an onboarding flow\", \"design a health scoring model\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Shield Maps regulatory exposure across GDPR, CCPA, FTC, financial regulation, and export controls — frames every finding as risk, probability, fix, and cost of inaction. Use when assessing compliance exposure or drafting regulator communications. Trigger with \"assess my regulatory risk\", \"draft a regulatory response\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Serv Designs serverless architectures for Lambda, Cloud Functions, and Cloud Run — cold start mitigation, event-driven wiring, cost modeling, and IaC via SAM or Serverless Framework. Use when building or auditing serverless workloads. Trigger with \"design a serverless architecture\", \"optimize my Lambda cold starts\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Siem Builds log pipelines and SIEM detection rules — SIGMA format, MITRE mapping, retention policies, and alert tuning to keep volume within analyst capacity. Use when designing detection coverage or reducing alert fatigue. Trigger with \"write a SIEM detection rule\", \"audit my log pipeline\". Subagent · jeremylongshore/tons-of-skills-marketplace
- Security Scanner Scans source code for hardcoded secrets, SQL/command injection vectors, weak cryptography, and insecure defaults — using gitleaks, bandit, and pattern-based grep when tools are unavailable, with severity-rated findings and remediation guidance. Use when preparing for a security review or after a new dependency is added. Trigger with \"security scan\", \"find hardcoded secrets\". Subagent · jeremylongshore/tons-of-skills-marketplace